[CLOUDKITTY][VICTORIA] - policy prohibit report:get_summary to admin

Gaël THEROND gael.therond at bitswalk.com
Tue Nov 23 15:15:40 UTC 2021


aaaaah nice catch! I'll check that out as I use CentOS packages; it may
actually just be that!

Thanks a lot!

Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner <
rafaelweingartner at gmail.com> a écrit :

> I guess that the rule "context_is_admin" might have some weird definition
> in your version. Can you check it?
>
> On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner <
> rafaelweingartner at gmail.com> wrote:
>
>> Can you check this one?
>> https://review.opendev.org/c/openstack/cloudkitty/+/785132
>>
>> On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND <gael.therond at bitswalk.com>
>> wrote:
>>
>>> Hi everyone!
>>>
>>> Today I faced a weird situation with one of our cloud platforms using
>>> victoria release.
>>>
>>> When trying to get a summary of projects rates would it be through
>>> Horizon or CLI using the admin user of the platform we've got the following
>>> error message:
>>>
>>> https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
>>>
>>> From my understanding of the default policies of cloudkitty, this error
>>> seems to be a bit odd as the admin user profile actually match the default
>>> rules.
>>>
>>> At least as exposed in:
>>>
>>>
>>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/base.py
>>> and
>>>
>>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/v1/report.py
>>>
>>> Unless I misunderstood something (please correct me if I'm wrong), it's
>>> supposed to at least be ok with the matching.
>>>
>>
>>
>> --
>> Rafael Weingärtner
>>
>
>
> --
> Rafael Weingärtner
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211123/358325c6/attachment.htm>


More information about the openstack-discuss mailing list