[Bug 1952763] Fix proposed to charm-manila-ganesha (stable/victoria)

OpenStack Infra 1952763 at bugs.launchpad.net
Tue Sep 6 19:49:11 UTC 2022 

Fix proposed to branch: stable/victoria
Review: https://review.opendev.org/c/openstack/charm-manila-ganesha/+/856182

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/1952763

Title:
  [SRU] manilaclient.common.apiclient.exceptions.Forbidden: Access was
  denied to this resource. (HTTP 403)

Status in OpenStack Manila Charm:
  Fix Released
Status in OpenStack Manila-Ganesha Charm:
  Fix Released
Status in OpenStack Manila NetApp Charm:
  New
Status in Ubuntu Cloud Archive:
  Fix Released
Status in Ubuntu Cloud Archive xena series:
  Fix Released
Status in Ubuntu Cloud Archive yoga series:
  Fix Released
Status in manila package in Ubuntu:
  Fix Released
Status in manila source package in Impish:
  Won't Fix

Bug description:
  [Description]

  2021-11-29 19:26:53.581540 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/openstack/charm_tests/manila_ganesha/setup.py", line 40, in setup_ganesha_share_type
  2021-11-29 19:26:53.581579 | focal-medium |     manila_client.share_types.create

  results in:
  manilaclient.common.apiclient.exceptions.Forbidden: Access was denied to this resource. (HTTP 403)

  This occurs on wallaby and above as seen here:
  https://review.opendev.org/c/openstack/charm-manila-ganesha/+/816032

  2021-11-29 19:26:53.195961 | focal-medium | 2021-11-29 19:26:53 [ERROR] {'default_alias': 'zaza-6aadc5ce9f9b'}
  2021-11-29 19:26:53.196094 | focal-medium | 2021-11-29 19:26:53 [ERROR] Model default_alias (zaza-6aadc5ce9f9b)
  2021-11-29 19:26:53.581038 | focal-medium | Traceback (most recent call last):
  2021-11-29 19:26:53.581121 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/bin/functest-run-suite", line 8, in <module>
  2021-11-29 19:26:53.581157 | focal-medium |     sys.exit(main())
  2021-11-29 19:26:53.581206 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/charm_lifecycle/func_test_runner.py", line 374, in main
  2021-11-29 19:26:53.581248 | focal-medium |     func_test_runner(
  2021-11-29 19:26:53.581276 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/charm_lifecycle/func_test_runner.py", line 287, in func_test_runner
  2021-11-29 19:26:53.581312 | focal-medium |     run_env_deployment(env_deployment, keep_model=preserve_model,
  2021-11-29 19:26:53.581332 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/charm_lifecycle/func_test_runner.py", line 155, in run_env_deployment
  2021-11-29 19:26:53.581347 | focal-medium |     configure.configure(
  2021-11-29 19:26:53.581385 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/charm_lifecycle/configure.py", line 58, in configure
  2021-11-29 19:26:53.581426 | focal-medium |     run_configure_list(functions)
  2021-11-29 19:26:53.581446 | focal-medium |   File "/usr/lib/python3.8/contextlib.py", line 75, in inner
  2021-11-29 19:26:53.581460 | focal-medium |     return func(*args, **kwds)
  2021-11-29 19:26:53.581486 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/charm_lifecycle/configure.py", line 44, in run_configure_list
  2021-11-29 19:26:53.581521 | focal-medium |     utils.get_class(func)()
  2021-11-29 19:26:53.581540 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/zaza/openstack/charm_tests/manila_ganesha/setup.py", line 40, in setup_ganesha_share_type
  2021-11-29 19:26:53.581579 | focal-medium |     manila_client.share_types.create(
  2021-11-29 19:26:53.581597 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/api_versions.py", line 399, in substitution
  2021-11-29 19:26:53.581623 | focal-medium |     return method.func(obj, *args, **kwargs)
  2021-11-29 19:26:53.581639 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/v2/share_types.py", line 207, in create
  2021-11-29 19:26:53.581653 | focal-medium |     return self._do_create(
  2021-11-29 19:26:53.581667 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/v2/share_types.py", line 169, in _do_create
  2021-11-29 19:26:53.581681 | focal-medium |     return self._create("/types", body, "share_type")
  2021-11-29 19:26:53.581695 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/base.py", line 161, in _create
  2021-11-29 19:26:53.581709 | focal-medium |     resp, body = self.api.client.post(url, body=body)
  2021-11-29 19:26:53.581722 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/common/httpclient.py", line 177, in post
  2021-11-29 19:26:53.581736 | focal-medium |     return self._cs_request(url, 'POST', **kwargs)
  2021-11-29 19:26:53.581772 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/common/httpclient.py", line 133, in _cs_request
  2021-11-29 19:26:53.581795 | focal-medium |     return self._cs_request_with_retries(
  2021-11-29 19:26:53.581833 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/common/httpclient.py", line 150, in _cs_request_with_retries
  2021-11-29 19:26:53.581865 | focal-medium |     resp, body = self.request(url, method, **kwargs)
  2021-11-29 19:26:53.581890 | focal-medium |   File "/home/ubuntu/src/review.opendev.org/openstack/charm-manila-ganesha/build/builds/manila-ganesha/.tox/func-target/lib/python3.8/site-packages/manilaclient/common/httpclient.py", line 128, in request
  2021-11-29 19:26:53.581922 | focal-medium |     raise exceptions.from_response(resp, method, url)
  2021-11-29 19:26:53.581942 | focal-medium | manilaclient.common.apiclient.exceptions.Forbidden: Access was denied to this resource. (HTTP 403) (Request-ID: req-a4afca0f-3696-488f-be07-4fcb5f1742c6)

  For the manila package, we are still installing an old policy.json file.
  Manila moved away from using a policy.json file for RBAC in favor of using a policy.yaml file in the wallaby release [1]. In fact, this policy.yaml file
  is only used to override the default policy, which is in the manila code base itself. Therefore the package doesn't need to install any policy files.
  [1] https://opendev.org/openstack/manila/src/branch/master/releasenotes/notes/deprecate-json-formatted-policy-file-fd0345f215e6ccd5.yaml

  [Test Case]
  The manila-ganesha charm tests will be run as they are currently hitting this failure. The charm tests create a manila share, create 2 openstack instances, mount the share to those instances and tests writing/reading the share.

  https://opendev.org/openstack/charm-manila-ganesha/src/branch/master/src/tests/tests.yaml
  https://github.com/openstack-charmers/zaza-openstack-tests/blob/master/zaza/openstack/charm_tests/manila_ganesha/tests.py
  https://github.com/openstack-charmers/zaza-openstack-tests/blob/master/zaza/openstack/charm_tests/manila/tests.py

  [Regression Potential]
  The default package install is broken with the policy.json that we are installing. Worth noting, the policy.json file was deprecated in the wallaby release and the changes in this SRU are limited to the wallaby+1 release and up (ie. xena+).

  The regression potential here is that an upgrade to this new package
  version will move the deprecated /etc/manila/policy.json
  /etc/manila/disabled.policy.json.old in it's postinst script.
  Therefore the deprecated policy.json file will no longer be in force,
  but will still be available. The policy that will be in force is the
  default policy that is coded into the manila code base.

  [Discussion]
  The manila-ganesha charm also requires a change to add ceph mgr capabilities for the manila cephfs driver to allow it to run rados commands.

To manage notifications about this bug go to:
https://bugs.launchpad.net/charm-manila/+bug/1952763/+subscriptions

More information about the Ubuntu-openstack-bugs mailing list