Open Stack

On 05/05/2021 17:34, Christian Rohmann wrote:
> But the admin user with id "4b2abc14e511a7c0b10c" doing a resize 
> attempt caused an extend_volume and consequently did trigger a 
> notification of the VM,
> just as expected and documented in regards to this feature.
>
>
>
> Does anybody have any idea what could cause this or where to look for 
> more details? 


Apparently this is a (long) known issue (i.e. 
https://bugzilla.redhat.com/show_bug.cgi?id=1640443) which is caused by 

Cinder talking to Nova to have it create the volume-extended event but 
does so with user credentials and this is denied by the default policy:

--- cut ---
2021-05-06 15:13:12.214 4197 DEBUG nova.api.openstack.wsgi 
[req-4c291455-a21a-4314-8e57-173e66e6e60a 
f9c0b52ec43e423e9b5ea63d620f4e27 92a6c19e7482400385806266cdef149c - 
default default] Returning 403 to user: Po
licy doesn't allow os_compute_api:os-server-external-events:create to be 
performed. __call__ 
/usr/lib/python3/dist-packages/nova/api/openstack/wsgi.py:941
--- cut ---

Unfortunately cinder does not report or log anything.


Is switching cinder to the "admin" interface the proper approach here or 
am I missing something else?



Regards


Christian