[Bug 994034] [NEW] Cannot deallocate floating addresses as cloudadmin

[Andrew Glen-Young]

Public bug reported:

Occassionally I need to deallocate floating IP addresses that my clients
have allocated but are not using. Attempting to do this throws a
NotAuthorized even if my user has the global role of cloudadmin.

Unfortunately the 'nova-manage' commands do not seem to provide a means
of releasing floating IP addresses and so I am attempting to use the
euca2ools instead. The 'nova' tools will not seem to allow me to
deallocate/release addresses either.

Command (as a cloudadmin user):

$ euca-release-address 172.16.93.110

Exception:

2012-05-03 14:30:42 DEBUG nova.rpc.amqp [-] received {u'_context_roles': [u'cloudadmin', u'projectmanager', u'admin'], u'_context_request_id': u'req-ff455811-461c-4c80-a7ad-d64e8311c142', u'_context_read_deleted': u'no', u'args': {u'affect_auto_assigned': False, u'address': u'172.16.93.110'}, u'_context_auth_token': '<SANITIZED>', u'_context_is_admin': True, u'_context_project_id': u'canonistack_project', u'_context_timestamp': u'2012-05-03T14:30:42.506510', u'_context_user_id': u'admin', u'method': u'deallocate_floating_ip', u'_context_remote_address': u'172.16.93.65'} from (pid=18920) _safe_log /usr/lib/python2.7/dist-packages/nova/rpc/common.py:160
2012-05-03 14:30:42 DEBUG nova.rpc.amqp [req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] unpacked context: {'user_id': u'admin', 'roles': [u'cloudadmin', u'projectmanager', u'admin'], 'timestamp': '2012-05-03T14:30:42.506510', 'auth_token': '<SANITIZED>', 'remote_address': u'172.16.93.65', 'is_admin': True, 'request_id': u'req-ff455811-461c-4c80-a7ad-d64e8311c142', 'project_id': u'canonistack_project', 'read_deleted': u'no'} from (pid=18920) _safe_log /usr/lib/python2.7/dist-packages/nova/rpc/common.py:160
2012-05-03 14:30:42 WARNING nova.network.manager [req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] Address |172.16.93.110| is not allocated to your project |canonistack_project|
2012-05-03 14:30:42 ERROR nova.rpc.amqp [req-ff455811-461c-4c80-a7ad-d64e8311c142 admin canonistack_project] Exception during message handling
2012-05-03 14:30:42 TRACE nova.rpc.amqp Traceback (most recent call last):
2012-05-03 14:30:42 TRACE nova.rpc.amqp   File "/usr/lib/python2.7/dist-packages/nova/rpc/amqp.py", line 252, in _process_data
2012-05-03 14:30:42 TRACE nova.rpc.amqp     rval = node_func(context=ctxt, **node_args)
2012-05-03 14:30:42 TRACE nova.rpc.amqp   File "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 258, in wrapped
2012-05-03 14:30:42 TRACE nova.rpc.amqp     return func(self, context, *args, **kwargs)
2012-05-03 14:30:42 TRACE nova.rpc.amqp   File "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 421, in deallocate_floating_ip
2012-05-03 14:30:42 TRACE nova.rpc.amqp     self._floating_ip_owned_by_project(context, floating_ip)
2012-05-03 14:30:42 TRACE nova.rpc.amqp   File "/usr/lib/python2.7/dist-packages/nova/network/manager.py", line 394, in _floating_ip_owned_by_project
2012-05-03 14:30:42 TRACE nova.rpc.amqp     raise exception.NotAuthorized()
2012-05-03 14:30:42 TRACE nova.rpc.amqp NotAuthorized: Not authorised.
2012-05-03 14:30:42 TRACE nova.rpc.amqp

** Affects: nova (Ubuntu)
     Importance: Undecided
         Status: New


** Tags: canonistack

** Tags added: canonistack

-- 
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to nova in Ubuntu.
https://bugs.launchpad.net/bugs/994034

Title:
  Cannot deallocate floating addresses as cloudadmin

To manage notifications about this bug go to:
https://bugs.launchpad.net/ubuntu/+source/nova/+bug/994034/+subscriptions