I think here we should use the same approach 
as with neutron and nova.

Neutron[1] uses the nova admin service user declared here[2].

The 'nova_admin_username' looks like a similar parameter
to the 'os_privileged_user_name' declared with [3].

Later we may switch to dedicated per service `admin in nova` account,
but at this point it is not required.

Guest assisted snapshot may work with nfs or other backends,
so the os_privileged_* options should be defined with both gluster and nfs.

No tempest change should be required.

[1] 
https://github.com/openstack-dev/devstack/blob/db56ee8ef23a68650a3c3b26e5f3dd9b210b6040/lib/neutron#L1050
[2] 
https://github.com/openstack-dev/devstack/blob/a339efcd676b81804b2d5ab54d4bba8ecaba99b5/lib/nova#L361
[3] https://review.openstack.org/#/c/156940/

----- Original Message -----
> From: "Deepak Shetty" <dpkshe...@gmail.com>
> To: "OpenStack Development Mailing List (not for usage questions)" 
> <openstack-dev@lists.openstack.org>
> Cc: "Deepak C Shetty" <deepa...@redhat.com>
> Sent: Friday, February 27, 2015 8:57:00 AM
> Subject: Re: [openstack-dev] [tempest][glusterfs] Online Snapshot fails with  
> GlusterFS
> 
> Thanks Bharat for starting this thread
> 
> I would like to invite suggestions/opinions from tempest folks on whats the
> right way to get this to work ?
> 
> 1) Use priviledge user in cinder.conf
> 
> --or --
> 
> 2) Modify tempest volume snapshot_in_use testcase to bump the user to admin,
> run the test, revert back to demo before leaving the testcase
> 
> thanx,
> deepak
> 
> 
> On Fri, Feb 27, 2015 at 11:57 AM, Bharat Kumar < bharat.kobag...@redhat.com >
> wrote:
> 
> 
> 
> Hi,
> 
> As part of tempest job " gate-tempest-dsvm-full-glusterfs " run [1], the test
> case " test_snapshot_create_with_volume_in_use" [2] is failing.
> This is because demo user is unable to create online snapshots, due to nova
> policy rules[3].
> 
> To avoid this issue we can modify test case, to make "demo" user as an admin
> before creating snapshot and reverting after it finishes.
> 
> Another approach is to use privileged user (
> https://review.openstack.org/#/c/156940/ ) to create online snapshot.
> 
> [1]
> http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/
> [2]
> https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66
> [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329
> --
> Warm Regards,
> Bharat Kumar Kobagana
> Software Engineer
> OpenStack Storage – RedHat India
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 
> 
> 
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> 

__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev

Reply via email to