[Bug 2069125] Re: [SRU] Manila driver error with ONTAP SVM-scoped user

OpenStack Infra 2069125 at bugs.launchpad.net
Mon Jul 29 20:35:14 UTC 2024 

Reviewed:  https://review.opendev.org/c/openstack/manila/+/922943
Committed: https://opendev.org/openstack/manila/commit/2aba4ca70e7f4b01c7b65c62b91b603a3ef9ddbe
Submitter: "Zuul (22348)"
Branch:    unmaintained/yoga

commit 2aba4ca70e7f4b01c7b65c62b91b603a3ef9ddbe
Author: agireesh <gawasthi2010 at gmail.com>
Date:   Wed Jun 26 17:36:01 2024 +0530

    Fixed bug 2069125: Manila driver error with ONTAP SVM-scoped user
    
    Fixed the issue for the NetApp driver in the ZAPI workflow where a
    Vserver-scoped user failed to add rules for a share when the
    Vserver LIF was not configured with Kerberos.
    
    Closes-Bug: #2069125
    Change-Id: I8544efbdac207c54d75c55ee4a039c5324433794
    (cherry picked from commit 232627db3b39163cfbef00d1e625fcd9a524253a)
    (cherry picked from commit 44df1ec42ddc044592b6bdcbe685311677bbbceb)
    (cherry picked from commit 78b4978992b60b9be5170753d3076b439b81bb42)
    (cherry picked from commit 0e3523e1168e632618dc3ed550869e42b3979aaa)
    (cherry picked from commit 356071ba7060487a2d6658ab75c9b7b4d1d0149f)


** Changed in: cloud-archive/yoga
       Status: New => Fix Committed

** Tags added: in-unmaintained-xena

-- 
You received this bug notification because you are a member of Ubuntu
OpenStack, which is subscribed to Ubuntu Cloud Archive.
https://bugs.launchpad.net/bugs/2069125

Title:
  [SRU] Manila driver error with ONTAP SVM-scoped user

Status in Ubuntu Cloud Archive:
  New
Status in Ubuntu Cloud Archive antelope series:
  New
Status in Ubuntu Cloud Archive bobcat series:
  New
Status in Ubuntu Cloud Archive caracal series:
  New
Status in Ubuntu Cloud Archive yoga series:
  Fix Committed
Status in Ubuntu Cloud Archive zed series:
  Won't Fix
Status in OpenStack Shared File Systems Service (Manila):
  Fix Released
Status in manila package in Ubuntu:
  New
Status in manila source package in Jammy:
  New
Status in manila source package in Mantic:
  Won't Fix
Status in manila source package in Noble:
  New

Bug description:
  ************** SRU DESCRIPTION AT THE BOTTOM *************

  With the same NetApp stanza in the manila.conf file which was used without any issue in the Zed release was used in the Bobcat release. In the Bobcat release, the share creation worked normally, but adding access rule was not worked and couldn't delete the share. Below is the error log that occurs when adding a rule.
  I set all the roles indicated in NetApp's OpenStack operation guide in storage side(https://netapp-openstack-dev.github.io/openstack-docs/bobcat/manila/configuration/ontap_configuration/section_ontap-config.html#ontap-prerequisites).

  ########### manila-share.log ############

  2024-05-27 15:43:14.708 19 INFO oslo.messaging.notification.share.create.end [None req-4b46bc06-9332-40f3-9ef0-57895519228c c2e47ee4c8295d950db5757f73dfe9b5149947ccf5dc4e4ba3370c210217bcc4 76a637a88d624e3ea80b261a4c66dc2a - - - -] {"message_id": "d9fcc12a-5449-437c-85a0-eb5bdddab553", "publisher_id": "share.dc1-infra-rnd-stack-ctrl-01 at c400", "event_type": "share.create.end", "priority": "INFO", "payload": {"share_id": "68e79de3-5e22-472b-a895-c79e0b677b01", "user_id": "c2e47ee4c8295d950db5757f73dfe9b5149947ccf5dc4e4ba3370c210217bcc4", "project_id": "76a637a88d624e3ea80b261a4c66dc2a", "snapshot_id": null, "share_group_id": null, "size": 20, "name": "asdasd", "description": null, "proto": "NFS", "is_public": true, "availability_zone": null, "host": "dc1-infra-rnd-stack-ctrl-01 at c400#N1_Data", "status": "creating", "share_type_id": "40cdd81c-1fa8-4fc6-8f5e-288d0b9f5430", "share_type": "NFS_VOLUME"}, "timestamp": "2024-05-27 06:43:14.708153"}
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server [None req-be5d1bf0-c013-47ac-94bc-2de599a3862f c2e47ee4c8295d950db5757f73dfe9b5149947ccf5dc4e4ba3370c210217bcc4 76a637a88d624e3ea80b261a4c66dc2a - - - -] Exception during message handling: manila.share.drivers.netapp.dataontap.client.api.NaApiError: NetApp API failed. Reason - 15661:entry doesn't exist
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server Traceback (most recent call last):
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/oslo_messaging/rpc/server.py", line 165, in _process_incoming
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     res = self.dispatcher.dispatch(message)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/oslo_messaging/rpc/dispatcher.py", line 309, in dispatch
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return self._do_dispatch(endpoint, method, ctxt, args)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/oslo_messaging/rpc/dispatcher.py", line 229, in _do_dispatch
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = func(ctxt, **new_args)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/manager.py", line 236, in wrapped
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/utils.py", line 481, in wrapper
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return func(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/manager.py", line 4177, in update_access
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     self.update_access_for_instances(context, [share_instance_id],
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/manager.py", line 4191, in update_access_for_instances
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     self.access_helper.update_access_rules(
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/access.py", line 299, in update_access_rules
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     self._update_access_rules(context, share_instance_id,
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/access.py", line 336, in _update_access_rules
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     driver_rule_updates = self._update_rules_through_share_driver(
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/access.py", line 401, in _update_rules_through_share_driver
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     driver_rule_updates = self.driver.update_access(
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/cluster_mode/drv_single_svm.py", line 103, in update_access
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     self.library.update_access(context, share, access_rules, add_rules,
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/utils.py", line 115, in trace_wrapper
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/cluster_mode/lib_base.py", line 2355, in update_access
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     helper.update_access(share, share_name, access_rules)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/utils.py", line 115, in trace_wrapper
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/protocols/base.py", line 34, in wrapped_func
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return source_func(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/oslo_concurrency/lockutils.py", line 414, in inner
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return f(*args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/protocols/base.py", line 32, in source_func
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/protocols/nfs_cmode.py", line 114, in update_access
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     auth_methods = self._get_auth_methods()
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/utils.py", line 115, in trace_wrapper
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/protocols/nfs_cmode.py", line 221, in _get_auth_methods
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     kerberos_enabled = self._client.is_kerberos_enabled()
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/utils.py", line 115, in trace_wrapper
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = f(self, *args, **kwargs)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/client/client_cmode.py", line 2042, in is_kerberos_enabled
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     result = self.send_request('kerberos-config-get', api_args)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/client/client_base.py", line 89, in send_request
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return self.connection.invoke_successfully(
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/client/api.py", line 717, in invoke_successfully
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     return self.get_client(use_zapi=use_zapi).invoke_successfully(
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server   File "/var/lib/kolla/venv/lib64/python3.9/site-packages/manila/share/drivers/netapp/dataontap/client/api.py", line 388, in invoke_successfully
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server     raise NaApiError(code, msg)
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server manila.share.drivers.netapp.dataontap.client.api.NaApiError: NetApp API failed. Reason - 15661:entry doesn't exist
  2024-05-27 15:43:57.077 19 ERROR oslo_messaging.rpc.server
  2024-05-27 15:44:08.487 19 INFO manila.share.manager [None req-4bfe58a9-a794-497d-8b75-7ee098ea0e11 - - - - - -] Updating share status

  ===============
  SRU DESCRIPTION
  ===============

  [Impact]

  The NetApp driver kerberos-config-get fails when using a SVM-scoped
  user because it does have not enough privileges to perform that check.
  This failure causes the entire stack to fail, thus preventing access
  rules from being added to shares. The fix addresses this by capturing
  the exception and not reraising it, allowing the operation to
  continue.

  [Test case]

  Testing around this is limited because:
  1) The NetApp CI upstream is broken at this time. The fix was validated internally by contributors and NetApp driver maintainers.
  2) We do not have a NetApp box in our lab to verify the SRU for this scenario.
  3) Running the Manila tempest suite is useless because the change is limited in scope to the NetApp driver, that is only operational when using NetApp storage.

  [Regression Potential]

  Given that the change is limited to the NetApp driver, it is small and
  was peer-validated, we consider the regression potential minimal.

  [Other Info]

  None.

To manage notifications about this bug go to:
https://bugs.launchpad.net/cloud-archive/+bug/2069125/+subscriptions

More information about the Ubuntu-openstack-bugs mailing list