DescriptionGregory Thiemonge
2022-07-20 07:49:16 UTC
Description of problem:
All the jobs are failing with "Policy does not allow this request to be performed" errors
ex:
octavia_tempest_plugin.tests.api.v2.test_flavor.FlavorAPITest.test_flavor_list[id-3ef040ee-fe7e-457b-a56f-8b152f7afa3b]
Traceback (most recent call last):
File "/home/stack/plugins/octavia/octavia_tempest_plugin/tests/RBAC_tests.py", line 75, in _check_allowed
method(*args, **kwargs)
File "/home/stack/plugins/octavia/octavia_tempest_plugin/common/decorators.py", line 42, in wrapper
return f(*func_args, **func_kwargs)
File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/flavor_client.py", line 150, in list_flavors
return self._list_objects(query_params=query_params,
File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/base_client.py", line 207, in _list_objects
response, body = self.get(request_uri)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 314, in get
return self.request('GET', url, extra_headers, headers)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 720, in request
self._error_checker(resp, resp_body)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 821, in _error_checker
raise exceptions.Forbidden(resp_body, resp=resp)
tempest.lib.exceptions.Forbidden: Forbidden
Details: {'faultcode': 'Client', 'faultstring': 'Policy does not allow this request to be performed.', 'debuginfo': None}
A new policy file was recently added in the Octavia RPM to prepare the sRBAC support but it breaks the non sRBAC jobs. This change needs to be reverted to fix the default jobs.
Version-Release number of selected component (if applicable):
17.0
How reproducible:
100%
Steps to Reproduce:
1. deploy OSP17 with Octavia
2. runs the tempest suite
3.
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHEA-2022:6543
Description of problem: All the jobs are failing with "Policy does not allow this request to be performed" errors ex: octavia_tempest_plugin.tests.api.v2.test_flavor.FlavorAPITest.test_flavor_list[id-3ef040ee-fe7e-457b-a56f-8b152f7afa3b] Traceback (most recent call last): File "/home/stack/plugins/octavia/octavia_tempest_plugin/tests/RBAC_tests.py", line 75, in _check_allowed method(*args, **kwargs) File "/home/stack/plugins/octavia/octavia_tempest_plugin/common/decorators.py", line 42, in wrapper return f(*func_args, **func_kwargs) File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/flavor_client.py", line 150, in list_flavors return self._list_objects(query_params=query_params, File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/base_client.py", line 207, in _list_objects response, body = self.get(request_uri) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 314, in get return self.request('GET', url, extra_headers, headers) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 720, in request self._error_checker(resp, resp_body) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 821, in _error_checker raise exceptions.Forbidden(resp_body, resp=resp) tempest.lib.exceptions.Forbidden: Forbidden Details: {'faultcode': 'Client', 'faultstring': 'Policy does not allow this request to be performed.', 'debuginfo': None} A new policy file was recently added in the Octavia RPM to prepare the sRBAC support but it breaks the non sRBAC jobs. This change needs to be reverted to fix the default jobs. Version-Release number of selected component (if applicable): 17.0 How reproducible: 100% Steps to Reproduce: 1. deploy OSP17 with Octavia 2. runs the tempest suite 3.