[CLOUDKITTY][VICTORIA] - policy prohibit report:get_summary to admin

Rafael Weingärtner rafaelweingartner at gmail.com
Tue Nov 23 15:08:58 UTC 2021


I guess that the rule "context_is_admin" might have some weird definition
in your version. Can you check it?

On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner <
rafaelweingartner at gmail.com> wrote:

> Can you check this one?
> https://review.opendev.org/c/openstack/cloudkitty/+/785132
>
> On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND <gael.therond at bitswalk.com>
> wrote:
>
>> Hi everyone!
>>
>> Today I faced a weird situation with one of our cloud platforms using
>> victoria release.
>>
>> When trying to get a summary of projects rates would it be through
>> Horizon or CLI using the admin user of the platform we've got the following
>> error message:
>>
>> https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
>>
>> From my understanding of the default policies of cloudkitty, this error
>> seems to be a bit odd as the admin user profile actually match the default
>> rules.
>>
>> At least as exposed in:
>>
>>
>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/base.py
>> and
>>
>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/v1/report.py
>>
>> Unless I misunderstood something (please correct me if I'm wrong), it's
>> supposed to at least be ok with the matching.
>>
>
>
> --
> Rafael Weingärtner
>


-- 
Rafael Weingärtner
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211123/08773a82/attachment.htm>


More information about the openstack-discuss mailing list