Re: [openstack-dev] [tempest][glusterfs] Online Snapshot fails with GlusterFS
I'm assuming your mean the following lines in nova policy.js: compute_extension:os-assisted-volume-snapshots:create:rule:admin_api, compute_extension:os-assisted-volume-snapshots:delete:rule:admin_api These 2 calls are not intended to be made directly via an end user, but via cinder, as a privileged user. Please do not patch tempest, since this is a real bug it is highlighting. The fix is to get cinder to use a privileged user account to make this call. Please raise a cinder bug. Thanks Hi, As part of tempest job gate-tempest-dsvm-full-glusterfs http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ run [1], the test case test_snapshot_create_with_volume_in_use [2] is failing. This is because demo user is unable to create online snapshots, due to nova policy rules[3]. To avoid this issue we can modify test case, to make demo user as an admin before creating snapshot and reverting after it finishes. Another approach is to use privileged user ( https://review.openstack.org/#/c/156940/) to create online snapshot. [1] http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ [2] https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66 [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329 -- Warm Regards, Bharat Kumar Kobagana Software Engineer OpenStack Storage – RedHat India __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [tempest][glusterfs] Online Snapshot fails with GlusterFS
Duncan, Attila, Thanks for your response. We found a issue when using os_priviledge_user_name which is when we sent this patch https://review.openstack.org/#/c/156940/ Post that we used admin user, its password and admin tenant in cinder.conf to make it work But we thought that using admin creds (esp password) isn't secure in cinder.conf so we thought of patching tempest test case, but later while talking with Attila on IRC, figured that we can use user 'nova' which is added to admin role in lib/nova as part of devstack setup So we plan to test using nova creds. thanx, deepak On Mon, Mar 2, 2015 at 5:24 PM, Duncan Thomas duncan.tho...@gmail.com wrote: I'm assuming your mean the following lines in nova policy.js: compute_extension:os-assisted-volume-snapshots:create:rule:admin_api, compute_extension:os-assisted-volume-snapshots:delete:rule:admin_api These 2 calls are not intended to be made directly via an end user, but via cinder, as a privileged user. Please do not patch tempest, since this is a real bug it is highlighting. The fix is to get cinder to use a privileged user account to make this call. Please raise a cinder bug. Thanks Hi, As part of tempest job gate-tempest-dsvm-full-glusterfs http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ run [1], the test case test_snapshot_create_with_volume_in_use [2] is failing. This is because demo user is unable to create online snapshots, due to nova policy rules[3]. To avoid this issue we can modify test case, to make demo user as an admin before creating snapshot and reverting after it finishes. Another approach is to use privileged user ( https://review.openstack.org/#/c/156940/) to create online snapshot. [1] http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ [2] https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66 [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329 -- Warm Regards, Bharat Kumar Kobagana Software Engineer OpenStack Storage – RedHat India __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
[openstack-dev] [tempest][glusterfs] Online Snapshot fails with GlusterFS
Hi, As part of tempest job gate-tempest-dsvm-full-glusterfs http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ run [1], the test case test_snapshot_create_with_volume_in_use [2] is failing. This is because demo user is unable to create online snapshots, due to nova policy rules[3]. To avoid this issue we can modify test case, to make demo user as an admin before creating snapshot and reverting after it finishes. Another approach is to use privileged user (https://review.openstack.org/#/c/156940/) to create online snapshot. [1] http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ [2] https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66 [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329 -- Warm Regards, Bharat Kumar Kobagana Software Engineer OpenStack Storage – RedHat India __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Re: [openstack-dev] [tempest][glusterfs] Online Snapshot fails with GlusterFS
Thanks Bharat for starting this thread I would like to invite suggestions/opinions from tempest folks on whats the right way to get this to work ? 1) Use priviledge user in cinder.conf --or -- 2) Modify tempest volume snapshot_in_use testcase to bump the user to admin, run the test, revert back to demo before leaving the testcase thanx, deepak On Fri, Feb 27, 2015 at 11:57 AM, Bharat Kumar bharat.kobag...@redhat.com wrote: Hi, As part of tempest job gate-tempest-dsvm-full-glusterfs http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ run [1], the test case test_snapshot_create_with_volume_in_use [2] is failing. This is because demo user is unable to create online snapshots, due to nova policy rules[3]. To avoid this issue we can modify test case, to make demo user as an admin before creating snapshot and reverting after it finishes. Another approach is to use privileged user ( https://review.openstack.org/#/c/156940/) to create online snapshot. [1] http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/ [2] https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66 [3] https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329 -- Warm Regards, Bharat Kumar Kobagana Software Engineer OpenStack Storage – RedHat India __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev __ OpenStack Development Mailing List (not for usage questions) Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
