[openstack-dev] [rally]how can I give admin role to rally

Andrey Kurilin akurilin at mirantis.com
Tue Feb 23 09:33:03 UTC 2016

Since I don't found such scenario in our upstream repo, I assume that this
is your custom plugin and I can propose you several solutions:

1) `nova evacuate` is allowed only for admin user, so you can use admin
client in your scenario without changing roles for users. Also,
`required_openstack` validator will check for you that admin client is
specified for your deployment. An example:

from rally.plugins.openstack import scenario

class MyPlugin(scenario.OpenStackScenario):
    """My awesome plugin."""

    @validation.required_openstack(admin=True, users=True)
    def some_scenario(self):
        # do something with nova via simple user
        user_novaclient = self.clients("nova")
        server = user_novaclient.servers.boot(...)

        # do something with nova via admin user
        admin_novaclient = self.admin_clients("nova")

2) Rally supports "roles" context, which can assign roles to users. If you
specify your task as below, self.clients("nova") will return novaclient
initialized by user with "admin" and "another_name_of_role_if_needed" roles:

        type: "constant"
        times: 10
        concurrency: 2
          tenants: 2
          users_per_tenant: 3
          - "admin"
          - "another_name_of_role_if_needed"

On Tue, Feb 23, 2016 at 8:20 AM, Wu, Liming <wulm.fnst at cn.fujitsu.com>

> Hi
>   When I run a scenario about "nova evacuate **",  error message was
>   Show as follows.  How can I give the admin role to rally user.
> 2016-02-23 09:18:25.631 6212 INFO rally.task.runner [-] Task
> e2ad6390-8cde-4ed7-a595-f5c36d5e2a08 | ITER: 0 END: Error Forbidden: User
> does not have admin privileges (HTTP 403) (Request-ID:
> req-45312185-56e5-46c4-a39a-68f5e346715e)
> 2016-02-23 09:18:25.636 5995 INFO
> rally.plugins.openstack.context.cleanup.context [-] Task
> e2ad6390-8cde-4ed7-a595-f5c36d5e2a08 | Starting:  user resources cleanup
> Best regards
> wuliming
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Best regards,
Andrey Kurilin.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160223/043bc8bf/attachment.html>

More information about the OpenStack-dev mailing list