[CLOUDKITTY][VICTORIA] - policy prohibit report:get_summary to admin
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error
seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND gael.therond@bitswalk.com wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
I guess that the rule "context_is_admin" might have some weird definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner < rafaelweingartner@gmail.com> wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND gael.therond@bitswalk.com wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
aaaaah nice catch! I'll check that out as I use CentOS packages; it may actually just be that!
Thanks a lot!
Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner < rafaelweingartner@gmail.com> a écrit :
I guess that the rule "context_is_admin" might have some weird definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner < rafaelweingartner@gmail.com> wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND gael.therond@bitswalk.com wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
-- Rafael Weingärtner
ah ah! Was exactly that indeed!
So, CentOS cloudkitty common package is not using the latest patch fixing the issue -> http://mirror.centos.org/centos/8/cloud/x86_64/openstack-victoria/Packages/o... Thanks a lot for the hint!
Will patch it downstream waiting for COS patch.
Le mar. 23 nov. 2021 à 15:15, Gaël THEROND gael.therond@bitswalk.com a écrit :
aaaaah nice catch! I'll check that out as I use CentOS packages; it may actually just be that!
Thanks a lot!
Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner < rafaelweingartner@gmail.com> a écrit :
I guess that the rule "context_is_admin" might have some weird definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner < rafaelweingartner@gmail.com> wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND gael.therond@bitswalk.com wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
-- Rafael Weingärtner
Hello Gaël,
This fix will not be included in RDO packages until we issue a new victoria release, which only then can be packaged as RPM. I have proposed release patches for both victoria and wallaby. They need to be approved by Rafael.
Using Kolla source images is another option, since in recent versions (including Victoria) they use the tip of stable branches.
Best wishes, Pierre
On Tue, 23 Nov 2021 at 16:31, Gaël THEROND gael.therond@bitswalk.com wrote:
ah ah! Was exactly that indeed!
So, CentOS cloudkitty common package is not using the latest patch fixing the issue -> http://mirror.centos.org/centos/8/cloud/x86_64/openstack-victoria/Packages/o... Thanks a lot for the hint!
Will patch it downstream waiting for COS patch.
Le mar. 23 nov. 2021 à 15:15, Gaël THEROND gael.therond@bitswalk.com a écrit :
aaaaah nice catch! I'll check that out as I use CentOS packages; it may actually just be that!
Thanks a lot!
Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner rafaelweingartner@gmail.com a écrit :
I guess that the rule "context_is_admin" might have some weird definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner rafaelweingartner@gmail.com wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND gael.therond@bitswalk.com wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms using victoria release.
When trying to get a summary of projects rates would it be through Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit... and https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong), it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
-- Rafael Weingärtner
Hello Pierre, Releases approved.
On Fri, Dec 10, 2021 at 11:26 AM Pierre Riteau pierre@stackhpc.com wrote:
Hello Gaël,
This fix will not be included in RDO packages until we issue a new victoria release, which only then can be packaged as RPM. I have proposed release patches for both victoria and wallaby. They need to be approved by Rafael.
Using Kolla source images is another option, since in recent versions (including Victoria) they use the tip of stable branches.
Best wishes, Pierre
On Tue, 23 Nov 2021 at 16:31, Gaël THEROND gael.therond@bitswalk.com wrote:
ah ah! Was exactly that indeed!
So, CentOS cloudkitty common package is not using the latest patch
fixing the issue -> http://mirror.centos.org/centos/8/cloud/x86_64/openstack-victoria/Packages/o...
Thanks a lot for the hint!
Will patch it downstream waiting for COS patch.
Le mar. 23 nov. 2021 à 15:15, Gaël THEROND gael.therond@bitswalk.com
a écrit :
aaaaah nice catch! I'll check that out as I use CentOS packages; it may
actually just be that!
Thanks a lot!
Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner <
rafaelweingartner@gmail.com> a écrit :
I guess that the rule "context_is_admin" might have some weird
definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner <
rafaelweingartner@gmail.com> wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND <
gael.therond@bitswalk.com> wrote:
Hi everyone!
Today I faced a weird situation with one of our cloud platforms
using victoria release.
When trying to get a summary of projects rates would it be through
Horizon or CLI using the admin user of the platform we've got the following error message:
https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
From my understanding of the default policies of cloudkitty, this
error seems to be a bit odd as the admin user profile actually match the default rules.
At least as exposed in:
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
and
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
Unless I misunderstood something (please correct me if I'm wrong),
it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
-- Rafael Weingärtner
Hi everyone! Thanks a lot for those information. I’ve fixed it downstream as I was waiting for the bugfix to make it to RDO repos, I see that it should be available soon.
Thanks a lot!
Le lun. 13 déc. 2021 à 11:53, Rafael Weingärtner < rafaelweingartner@gmail.com> a écrit :
Hello Pierre, Releases approved.
On Fri, Dec 10, 2021 at 11:26 AM Pierre Riteau pierre@stackhpc.com wrote:
Hello Gaël,
This fix will not be included in RDO packages until we issue a new victoria release, which only then can be packaged as RPM. I have proposed release patches for both victoria and wallaby. They need to be approved by Rafael.
Using Kolla source images is another option, since in recent versions (including Victoria) they use the tip of stable branches.
Best wishes, Pierre
On Tue, 23 Nov 2021 at 16:31, Gaël THEROND gael.therond@bitswalk.com wrote:
ah ah! Was exactly that indeed!
So, CentOS cloudkitty common package is not using the latest patch
fixing the issue -> http://mirror.centos.org/centos/8/cloud/x86_64/openstack-victoria/Packages/o...
Thanks a lot for the hint!
Will patch it downstream waiting for COS patch.
Le mar. 23 nov. 2021 à 15:15, Gaël THEROND gael.therond@bitswalk.com
a écrit :
aaaaah nice catch! I'll check that out as I use CentOS packages; it
may actually just be that!
Thanks a lot!
Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner <
rafaelweingartner@gmail.com> a écrit :
I guess that the rule "context_is_admin" might have some weird
definition in your version. Can you check it?
On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner <
rafaelweingartner@gmail.com> wrote:
Can you check this one? https://review.opendev.org/c/openstack/cloudkitty/+/785132
On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND <
gael.therond@bitswalk.com> wrote:
> > Hi everyone! > > Today I faced a weird situation with one of our cloud platforms
using victoria release.
> > When trying to get a summary of projects rates would it be through
Horizon or CLI using the admin user of the platform we've got the following error message:
> > https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/ > > From my understanding of the default policies of cloudkitty, this
error seems to be a bit odd as the admin user profile actually match the default rules.
> > At least as exposed in: > >
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
> and >
https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkit...
> > Unless I misunderstood something (please correct me if I'm wrong),
it's supposed to at least be ok with the matching.
-- Rafael Weingärtner
-- Rafael Weingärtner
-- Rafael Weingärtner
participants (3)
-
Gaël THEROND
-
Pierre Riteau
-
Rafael Weingärtner