Open Stack

On Thu, 2021-05-06 at 18:08 +0200, Christian Rohmann wrote:
> On 05/05/2021 17:34, Christian Rohmann wrote:
> > But the admin user with id "4b2abc14e511a7c0b10c" doing a resize 
> > attempt caused an extend_volume and consequently did trigger a 
> > notification of the VM,
> > just as expected and documented in regards to this feature.
> > 
> > 
> > 
> > Does anybody have any idea what could cause this or where to look for 
> > more details? 
> 
> 
> Apparently this is a (long) known issue (i.e. 
> https://bugzilla.redhat.com/show_bug.cgi?id=1640443) which is caused by 
> 
> Cinder talking to Nova to have it create the volume-extended event but 
> does so with user credentials and this is denied by the default policy:
> 
> --- cut ---
> 2021-05-06 15:13:12.214 4197 DEBUG nova.api.openstack.wsgi 
> [req-4c291455-a21a-4314-8e57-173e66e6e60a 
> f9c0b52ec43e423e9b5ea63d620f4e27 92a6c19e7482400385806266cdef149c - 
> default default] Returning 403 to user: Po
> licy doesn't allow os_compute_api:os-server-external-events:create to be 
> performed. __call__ 
> /usr/lib/python3/dist-packages/nova/api/openstack/wsgi.py:941
> --- cut ---
> 
> Unfortunately cinder does not report or log anything.
that woudl make sense give the externa event api is admin only and only inteed to be use by services
so the fix would be for cidner to use an admin credtial not the user one to send the event to nova.
> 
> 
> Is switching cinder to the "admin" interface the proper approach here or 
> am I missing something else?
> 
> 
> 
> Regards
> 
> 
> Christian
> 
>