[CLOUDKITTY][VICTORIA] - policy prohibit report:get_summary to admin

Gaël THEROND gael.therond at bitswalk.com
Tue Nov 23 15:28:51 UTC 2021


ah ah! Was exactly that indeed!

So, CentOS cloudkitty common package is not using the latest patch fixing
the issue ->
http://mirror.centos.org/centos/8/cloud/x86_64/openstack-victoria/Packages/o/openstack-cloudkitty-common-13.0.0-1.el8.noarch.rpm
Thanks a lot for the hint!

Will patch it downstream waiting for COS patch.

Le mar. 23 nov. 2021 à 15:15, Gaël THEROND <gael.therond at bitswalk.com> a
écrit :

> aaaaah nice catch! I'll check that out as I use CentOS packages; it may
> actually just be that!
>
> Thanks a lot!
>
> Le mar. 23 nov. 2021 à 15:09, Rafael Weingärtner <
> rafaelweingartner at gmail.com> a écrit :
>
>> I guess that the rule "context_is_admin" might have some weird definition
>> in your version. Can you check it?
>>
>> On Tue, Nov 23, 2021 at 12:06 PM Rafael Weingärtner <
>> rafaelweingartner at gmail.com> wrote:
>>
>>> Can you check this one?
>>> https://review.opendev.org/c/openstack/cloudkitty/+/785132
>>>
>>> On Tue, Nov 23, 2021 at 12:01 PM Gaël THEROND <gael.therond at bitswalk.com>
>>> wrote:
>>>
>>>> Hi everyone!
>>>>
>>>> Today I faced a weird situation with one of our cloud platforms using
>>>> victoria release.
>>>>
>>>> When trying to get a summary of projects rates would it be through
>>>> Horizon or CLI using the admin user of the platform we've got the following
>>>> error message:
>>>>
>>>> https://paste.opendev.org/show/bIgG6owrN9B2F3O7iqYG/
>>>>
>>>> From my understanding of the default policies of cloudkitty, this error
>>>> seems to be a bit odd as the admin user profile actually match the default
>>>> rules.
>>>>
>>>> At least as exposed in:
>>>>
>>>>
>>>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/base.py
>>>> and
>>>>
>>>> https://opendev.org/openstack/cloudkitty/src/branch/stable/victoria/cloudkitty/common/policies/v1/report.py
>>>>
>>>> Unless I misunderstood something (please correct me if I'm wrong), it's
>>>> supposed to at least be ok with the matching.
>>>>
>>>
>>>
>>> --
>>> Rafael Weingärtner
>>>
>>
>>
>> --
>> Rafael Weingärtner
>>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20211123/7241d5df/attachment-0001.htm>


More information about the openstack-discuss mailing list