kiranchavala opened a new issue, #7308:
URL: https://github.com/apache/cloudstack/issues/7308
##### ISSUE TYPE
* Bug report
##### COMPONENT NAME
~~~
Component: UI
Component: API
~~~
##### CLOUDSTACK VERSION
~~~
4.18 nightly
4.17.2
~~~
##### SUMMARY
Unable to create a network in a particular domain with Root admin
Steps to reproduce the issue
1. Create a domain
2. Create a Account with (DomainAdmin) Role
3. Login as root admin ( admin )
4. Create a network , select the domain
Same issue occurs if you try with API
https://cloudstack.apache.org/api/apidocs-4.17/apis/createNetwork.html
create network displaytext=<> name=<> networkofferingid=<> zoneid=<>
domainid=<>
[Screencast from 03-03-23 11:23:11 AM
IST.webm](https://user-images.githubusercontent.com/1401014/222644436-1de14354-3086-4fea-aca0-234a2c29debd.webm)
logs
~~~
2023-03-03 05:53:48,889 DEBUG [c.c.a.ApiServlet]
(qtp1239807799-17:ctx-fb9a5fb5) (logid:30764e52) ===START=== 10.0.3.251 -- GET
zoneId=918627a5-a7a9-4756-a637-f1fd135e0068&name=test-domain-network&displayText=test-domain-network&networkOfferingId=a12c131f-7f24-4c05-bdaa-645e34e7b033&domainid=88735a0d-c3a6-4da5-9c98-941c6d74afb7&command=createNetwork&response=json
2023-03-03 05:53:48,889 DEBUG [c.c.a.ApiServlet]
(qtp1239807799-17:ctx-fb9a5fb5) (logid:30764e52) Two factor authentication is
already verified for the user 2, so skipping
2023-03-03 05:53:48,892 DEBUG [c.c.a.ApiServer]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) CIDRs from which
account 'Account
[{"accountName":"admin","id":2,"uuid":"1011d1ed-b73a-11ed-87f7-1e00e400032c"}]'
is allowed to perform API calls: 0.0.0.0/0,::/0
2023-03-03 05:53:48,893 INFO [o.a.c.a.DynamicRoleBasedAPIAccessChecker]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Account [Account
[{"accountName":"admin","id":2,"uuid":"1011d1ed-b73a-11ed-87f7-1e00e400032c"}]]
is Root Admin or Domain Admin, all APIs are allowed.
2023-03-03 05:53:48,894 WARN [o.a.c.a.ProjectRoleBasedApiAccessChecker]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Project is null,
ProjectRoleBasedApiAccessChecker only applies to projects, returning API
[createNetwork] for user [User
{"username":"admin","uuid":"1012d9db-b73a-11ed-87f7-1e00e400032c"}.] as allowed.
2023-03-03 05:53:48,894 DEBUG [o.a.c.a.StaticRoleBasedAPIAccessChecker]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) RoleService is
enabled. We will use it instead of StaticRoleBasedAPIAccessChecker.
2023-03-03 05:53:48,894 DEBUG [o.a.c.r.ApiRateLimitServiceImpl]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) API rate limiting
is disabled. We will not use ApiRateLimitService.
2023-03-03 05:53:48,902 DEBUG [c.c.u.AccountManagerImpl]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Access granted to
Account
[{"accountName":"admin","id":2,"uuid":"1011d1ed-b73a-11ed-87f7-1e00e400032c"}]
to [Network Offering
[10-Guest-DefaultIsolatedNetworkOfferingWithSourceNatService] by
AffinityGroupAccessChecker
2023-03-03 05:53:48,919 DEBUG [c.c.n.g.BigSwitchBcfGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network, the physical isolation type is not BCF_SEGMENT
2023-03-03 05:53:48,920 DEBUG [o.a.c.n.c.m.ContrailGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,921 DEBUG [c.c.n.g.NiciraNvpGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,921 DEBUG [o.a.c.n.o.OpendaylightGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,923 DEBUG [c.c.n.g.OvsGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,923 DEBUG [c.c.n.g.DirectNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) VLAN: VLAN
2023-03-03 05:53:48,923 INFO [c.c.n.g.DirectNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,942 INFO [c.c.n.g.DirectNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,943 DEBUG [o.a.c.n.g.SspGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) SSP not
configured to be active
2023-03-03 05:53:48,944 DEBUG [o.a.c.n.t.s.TungstenGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,945 DEBUG [c.c.n.g.BrocadeVcsGuestNetworkGuru]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Refusing to
design this network
2023-03-03 05:53:48,946 DEBUG [o.a.c.e.o.NetworkOrchestrator]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Releasing lock
for Account
[{"accountName":"admin","id":2,"uuid":"1011d1ed-b73a-11ed-87f7-1e00e400032c"}]
2023-03-03 05:53:48,949 DEBUG [c.c.r.ResourceLimitManagerImpl]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) Updating resource
Type = network count for Account = 2 Operation = increasing Amount = 1
2023-03-03 05:53:48,972 DEBUG [c.c.a.ApiServlet]
(qtp1239807799-17:ctx-fb9a5fb5 ctx-fed7dd47) (logid:30764e52) ===END===
10.0.3.251 -- GET
zoneId=918627a5-a7a9-4756-a637-f1fd135e0068&name=test-domain-network&displayText=test-domain-network&networkOfferingId=a12c131f-7f24-4c05-bdaa-645e34e7b033&domainid=88735a0d-c3a6-4da5-9c98-941c6d74afb7&command=createNetwork&response=json
~~~
##### EXPECTED RESULTS
~~~
The network should get created in the respective domain
~~~
##### ACTUAL RESULTS
~~~
The network gets created in the root admin domain
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
