Bug 1441708

Summary: heketi USER KEY verification fails as it's unable to access the Volume APIs
Product: [Red Hat Storage] Red Hat Gluster Storage Reporter: Prasanth <pprakash>
Component: heketiAssignee: Michael Adam <madam>
Status: CLOSED WONTFIX QA Contact: Rahul Hinduja <rhinduja>
Severity: medium Docs Contact:
Priority: low    
Version: cns-3.5CC: hchiramm, jarrpa, jmulligan, pprakash, rhs-bugs, rreddy, rtalur, sarumuga, storage-qa-internal
Target Milestone: ---   
Target Release: ---   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: 1430859 Environment:
Last Closed: 2019-08-13 15:13:32 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1641685, 1641915    

Description Prasanth 2017-04-12 14:08:45 UTC
##################################################################

For USER KEY verification

# heketi-cli --server <RESTurl> --user user --secret MyOwnSecret volume list

Without user and secret authentication will fail. This user can access only volume API so only volume commands.

You can also set the username and key in environmental variable just like RESTurl

//Server
export HEKETI_CLI_SERVER=http://path

//User 
export HEKETI_CLI_USER=user

//secret
export HEKETI_CLI_KEY=MyOwnSecret

# heketi-cli volume list

This will internally use the environmental variables.

##################################################################

> 2) User - can access only volume API's

However, this doesn't work as the User cannot access even the volume API's as mentioned. So the USER KEY verification fails. 

######
# heketi-cli --user user --secret MyOwnSecret volume list
Error: Administrator access required

# heketi-cli --server http://heketi-storage-project.cloudapps.mystorage.com --user user --secret MyOwnSecret volume list
Error: Administrator access required
######

Comment 4 Niels de Vos 2018-05-09 09:35:51 UTC
Confirmed that this is still a problem with heketi-6.0.

There is no high priority use-case depending on this, moving out for reconsideration with cns-3.11.

Comment 7 John Mulligan 2018-10-31 14:52:47 UTC
*** Bug 1535543 has been marked as a duplicate of this bug. ***

Comment 8 Raghavendra Talur 2019-01-23 20:07:55 UTC
We still want to do this. Should be proposed for 3.11.2. This is not a RFE but a small fix which would reduce the confusion users have.