Public bug reported:
Try to create a volume by a regular user.
400 error is shown
But in logs there is info about forbidden action.
It will be good to show the actual reason to the user
2022-04-28 08:07:00.190799 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 260, in create_key
2022-04-28 08:07:00.190803 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.190808 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils castellan.common.exception.KeyManagerError: Key
manager error: Forbidden: Order creation attempt not allowed - please review
your user/project privileges
2022-04-28 08:07:00.190817 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils
2022-04-28 08:07:00.190874
2022-04-28 08:07:00.205306 2022-04-28 08:07:00.203 14 WARNING cinder.volume.api
[req-3a934586-4114-4b95-9115-cb537b036fc3 f0c4e4e360ad44c19f804c694302edda
e15c062664c249d9a17866296e54c875 - default default] Task
'cinder.volume.flows.api.create_volume.ExtractVolumeRequestTask;volume:create'
(c2ab30d9-f68b-4d82-80ed-85e547ba331c) transitioned into state 'FAILURE' from
state 'RUNNING'
2022-04-28 08:07:00.205352 1 predecessors (most recent first):
2022-04-28 08:07:00.205356 Flow 'volume_create_api':
cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205360 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205364 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 253, in create_key
2022-04-28 08:07:00.205368 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
order_ref = key_order.submit()
2022-04-28 08:07:00.205371 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py",
line 34, in wrapper
2022-04-28 08:07:00.205375 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return func(self, *args)
2022-04-28 08:07:00.205378 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py",
line 236, in submit
2022-04-28 08:07:00.205382 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
response = self._api.post(self._entity, json=order_dict)
2022-04-28 08:07:00.205386 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py",
line 75, in post
2022-04-28 08:07:00.205390 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return super(_HTTPClient, self).post(path, *args, **kwargs).json()
2022-04-28 08:07:00.205393 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File "/var/lib/openstack/lib/python3.6/site-packages/keystoneauth1/adapter.py",
line 401, in post
2022-04-28 08:07:00.205398 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return self.request(url, 'POST', **kwargs)
2022-04-28 08:07:00.205401 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py",
line 63, in request
2022-04-28 08:07:00.205404 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
self._check_status_code(resp)
2022-04-28 08:07:00.205409 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File "/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py",
line 107, in _check_status_code
2022-04-28 08:07:00.205412 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
status
2022-04-28 08:07:00.205416 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
barbicanclient.exceptions.HTTPClientError: Forbidden: Order creation attempt
not allowed - please review your user/project privileges
2022-04-28 08:07:00.205419 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205422 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205425 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205428 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205431 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py",
line 934, in create_encryption_key
2022-04-28 08:07:00.205435 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
length=length)
2022-04-28 08:07:00.205438 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 260, in create_key
2022-04-28 08:07:00.205442 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.205446 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order
creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205450 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205453 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205456 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205525 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205529 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py",
line 53, in _execute_task
2022-04-28 08:07:00.205532 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
result = task.execute(**arguments)
2022-04-28 08:07:00.205536 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py",
line 429, in execute
2022-04-28 08:07:00.205540 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
image_meta) # new key id that's been cloned already
2022-04-28 08:07:00.205544 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py",
line 348, in _get_encryption_key_id
2022-04-28 08:07:00.205548 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
volume_type_id)
2022-04-28 08:07:00.205551 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py",
line 940, in create_encryption_key
2022-04-28 08:07:00.205555 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
raise exception.Invalid(message="Key manager error")
2022-04-28 08:07:00.205558 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205685 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
** Affects: horizon
Importance: Undecided
Status: New
--
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Dashboard (Horizon).
https://bugs.launchpad.net/bugs/1970723
Title:
Correct Error message is not shown
Status in OpenStack Dashboard (Horizon):
New
Bug description:
Try to create a volume by a regular user.
400 error is shown
But in logs there is info about forbidden action.
It will be good to show the actual reason to the user
2022-04-28 08:07:00.190799 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 260, in create_key
2022-04-28 08:07:00.190803 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.190808 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils castellan.common.exception.KeyManagerError: Key
manager error: Forbidden: Order creation attempt not allowed - please review
your user/project privileges
2022-04-28 08:07:00.190817 2022-04-28 08:07:00.187 14 ERROR
cinder.volume.volume_utils
2022-04-28 08:07:00.190874
2022-04-28 08:07:00.205306 2022-04-28 08:07:00.203 14 WARNING
cinder.volume.api [req-3a934586-4114-4b95-9115-cb537b036fc3
f0c4e4e360ad44c19f804c694302edda e15c062664c249d9a17866296e54c875 - default
default] Task
'cinder.volume.flows.api.create_volume.ExtractVolumeRequestTask;volume:create'
(c2ab30d9-f68b-4d82-80ed-85e547ba331c) transitioned into state 'FAILURE' from
state 'RUNNING'
2022-04-28 08:07:00.205352 1 predecessors (most recent first):
2022-04-28 08:07:00.205356 Flow 'volume_create_api':
cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205360 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205364 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 253, in create_key
2022-04-28 08:07:00.205368 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
order_ref = key_order.submit()
2022-04-28 08:07:00.205371 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py",
line 34, in wrapper
2022-04-28 08:07:00.205375 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return func(self, *args)
2022-04-28 08:07:00.205378 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/v1/orders.py",
line 236, in submit
2022-04-28 08:07:00.205382 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
response = self._api.post(self._entity, json=order_dict)
2022-04-28 08:07:00.205386 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line
75, in post
2022-04-28 08:07:00.205390 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return super(_HTTPClient, self).post(path, *args, **kwargs).json()
2022-04-28 08:07:00.205393 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/keystoneauth1/adapter.py", line
401, in post
2022-04-28 08:07:00.205398 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
return self.request(url, 'POST', **kwargs)
2022-04-28 08:07:00.205401 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line
63, in request
2022-04-28 08:07:00.205404 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
self._check_status_code(resp)
2022-04-28 08:07:00.205409 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/barbicanclient/client.py", line
107, in _check_status_code
2022-04-28 08:07:00.205412 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
status
2022-04-28 08:07:00.205416 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
barbicanclient.exceptions.HTTPClientError: Forbidden: Order creation attempt
not allowed - please review your user/project privileges
2022-04-28 08:07:00.205419 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205422 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205425 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205428 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205431 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py",
line 934, in create_encryption_key
2022-04-28 08:07:00.205435 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
length=length)
2022-04-28 08:07:00.205438 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/castellan/key_manager/barbican_key_manager.py",
line 260, in create_key
2022-04-28 08:07:00.205442 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
raise exception.KeyManagerError(reason=e)
2022-04-28 08:07:00.205446 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
castellan.common.exception.KeyManagerError: Key manager error: Forbidden: Order
creation attempt not allowed - please review your user/project privileges
2022-04-28 08:07:00.205450 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205453 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
During handling of the above exception, another exception occurred:
2022-04-28 08:07:00.205456 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
2022-04-28 08:07:00.205525 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
Traceback (most recent call last):
2022-04-28 08:07:00.205529 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/taskflow/engines/action_engine/executor.py",
line 53, in _execute_task
2022-04-28 08:07:00.205532 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
result = task.execute(**arguments)
2022-04-28 08:07:00.205536 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py",
line 429, in execute
2022-04-28 08:07:00.205540 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
image_meta) # new key id that's been cloned already
2022-04-28 08:07:00.205544 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/flows/api/create_volume.py",
line 348, in _get_encryption_key_id
2022-04-28 08:07:00.205548 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
volume_type_id)
2022-04-28 08:07:00.205551 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
File
"/var/lib/openstack/lib/python3.6/site-packages/cinder/volume/volume_utils.py",
line 940, in create_encryption_key
2022-04-28 08:07:00.205555 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
raise exception.Invalid(message="Key manager error")
2022-04-28 08:07:00.205558 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
cinder.exception.Invalid: Key manager error
2022-04-28 08:07:00.205685 2022-04-28 08:07:00.203 14 ERROR cinder.volume.api
To manage notifications about this bug go to:
https://bugs.launchpad.net/horizon/+bug/1970723/+subscriptions
--
Mailing list: https://launchpad.net/~yahoo-eng-team
Post to : yahoo-eng-team@lists.launchpad.net
Unsubscribe : https://launchpad.net/~yahoo-eng-team
More help : https://help.launchpad.net/ListHelp
