Public bug reported:
Occassionally I need to deallocate floating IP addresses that my clients
have allocated but are not using. Attempting to do this throws a
NotAuthorized even if my user has the global role of cloudadmin.
Unfortunately the 'nova-manage' commands do not seem to provide a means
of releasing floating IP addresses and so I am attempting to use the
euca2ools instead. The 'nova' tools will not seem to allow me to
deallocate/release addresses either.
Command (as a cloudadmin user):
$ euca-release-address 172.16.93.110
Exception:
2012-05-03 14:30:42 DEBUG nova.rpc.amqp [-] received {u'_context_roles':
[u'cloudadmin', u'projectmanager', u'admin'], u'_context_request_id':
u'req-ff455811-461c-4c80-a7ad-d64e8311c142', u'_context_read_deleted': u'no',
u'args': {u'affect_auto_assigned': False, u'address': u'172.16.93.110'},
u'_context_auth_token': '<SANITIZED>', u'_context_is_admin': True,
u'_context_project_id': u'canonistack_project', u'_context_timestamp':
u'2012-05-03T14:30:42.506510', u'_context_user_id': u'admin', u'method':
u'deallocate_floating_ip', u'_context_remote_address': u'172.16.93.65'} from
(pid=18920) _safe_log /usr/lib/python2.7/dist-packages/nova/rpc/common.py:160
2012-05-03 14:30:42 DEBUG nova.rpc.amqp
[req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] unpacked
context: {'user_id': u'admin', 'roles': [u'cloudadmin', u'projectmanager',
u'admin'], 'timestamp': '2012-05-03T14:30:42.506510', 'auth_token':
'<SANITIZED>', 'remote_address': u'172.16.93.65', 'is_admin': True,
'request_id': u'req-ff455811-461c-4c80-a7ad-d64e8311c142', 'project_id':
u'canonistack_project', 'read_deleted': u'no'} from (pid=18920) _safe_log
/usr/lib/python2.7/dist-packages/nova/rpc/common.py:160
2012-05-03 14:30:42 WARNING nova.network.manager
[req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] Address
|172.16.93.110| is not allocated to your project |canonistack_project|
2012-05-03 14:30:42 ERROR nova.rpc.amqp
[req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] Exception
during message handling
2012-05-03 14:30:42 TRACE nova.rpc.amqp Traceback (most recent call last):
2012-05-03 14:30:42 TRACE nova.rpc.amqp File
"/usr/lib/python2.7/dist-packages/nova/rpc/amqp.py", line 252, in _process_data
2012-05-03 14:30:42 TRACE nova.rpc.amqp rval = node_func(context=ctxt,
**node_args)
2012-05-03 14:30:42 TRACE nova.rpc.amqp File
"/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 258, in wrapped
2012-05-03 14:30:42 TRACE nova.rpc.amqp return func(self, context, *args,
**kwargs)
2012-05-03 14:30:42 TRACE nova.rpc.amqp File
"/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 421, in
deallocate_floating_ip
2012-05-03 14:30:42 TRACE nova.rpc.amqp
self._floating_ip_owned_by_project(context, floating_ip)
2012-05-03 14:30:42 TRACE nova.rpc.amqp File
"/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 394, in
_floating_ip_owned_by_project
2012-05-03 14:30:42 TRACE nova.rpc.amqp raise exception.NotAuthorized()
2012-05-03 14:30:42 TRACE nova.rpc.amqp NotAuthorized: Not authorised.
2012-05-03 14:30:42 TRACE nova.rpc.amqp
** Affects: nova (Ubuntu)
Importance: Undecided
Status: New
** Tags: canonistack
** Tags added: canonistack
--
You received this bug notification because you are a member of Ubuntu
Bugs, which is subscribed to Ubuntu.
https://bugs.launchpad.net/bugs/994034
Title:
Cannot deallocate floating addresses as cloudadmin
To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova/+bug/994034/+subscriptions
--
ubuntu-bugs mailing list
[email protected]
https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
