Bug 2109724

Verified Update and Delete calls:
 
(user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret store --name secretCreatedFromSRCUser1
+---------------+------------------------------------------------------------------------+
| Field         | Value                                                                  |
+---------------+------------------------------------------------------------------------+
| Secret href   | http://10.0.0.140:9311/v1/secrets/a96e7805-aae8-4753-84dc-677b0cc54c9f |
| Name          | secretCreatedFromSRCUser1                                              |
| Created       | None                                                                   |
| Status        | None                                                                   |
| Content types | None                                                                   |
| Algorithm     | aes                                                                    |
| Bit length    | 256                                                                    |
| Secret type   | opaque                                                                 |
| Mode          | cbc                                                                    |
| Expiration    | None                                                                   |
+---------------+------------------------------------------------------------------------+
(user1_admin_in_project1) [stack@undercloud-0 ~]$ . user_2_rc
 
(user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret store --name secretCreatedFromSRCUser2
+---------------+------------------------------------------------------------------------+
| Field         | Value                                                                  |
+---------------+------------------------------------------------------------------------+
| Secret href   | http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38 |
| Name          | secretCreatedFromSRCUser2                                              |
| Created       | None                                                                   |
| Status        | None                                                                   |
| Content types | None                                                                   |
| Algorithm     | aes                                                                    |
| Bit length    | 256                                                                    |
| Secret type   | opaque                                                                 |
| Mode          | cbc                                                                    |
| Expiration    | None                                                                   |
+---------------+------------------------------------------------------------------------+
 
(user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret update http://10.0.0.140:9311/v1/secrets/a96e7805-aae8-4753-84dc-677b0cc54c9f 'TestPayload-updated'
4xx Client error: Forbidden: Secret update attempt not allowed - please review your user/project privileges
Forbidden: Secret update attempt not allowed - please review your user/project privileges
 
(user2_admin_in_project2) [stack@undercloud-0 ~]$ source user_1_rc
(user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret update http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38 'TestPayload-updated'
4xx Client error: Forbidden: Secret update attempt not allowed - please review your user/project privileges
Forbidden: Secret update attempt not allowed - please review your user/project privileges
 
 
(user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret delete http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38
4xx Client error: Forbidden: Secret deletion attempt not allowed - please review your user/project privileges
Forbidden: Secret deletion attempt not allowed - please review your user/project privileges
 
(user1_admin_in_project1) [stack@undercloud-0 ~]$ source user_2_rc
 
(user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret delete http://10.0.0.140:9311/v1/secrets/78052294-66ba-4024-86e8-a9f2e51453d6
4xx Client error: Forbidden: Secret deletion attempt not allowed - please review your user/project privileges
Forbidden: Secret deletion attempt not allowed - please review your user/project privileges


Verifying add:
[stack@undercloud-0 ~]$ openstack --os-cloud overcloud role assignment list --user user2_admin_in_project2 --project project1

[stack@undercloud-0 ~]$ openstack --os-cloud user2_admin_not_in_project1 token issue -c id -f value
The request you have made requires authentication. (HTTP 401) (Request-ID: req-3ce62a45-7dc2-41e4-a2d5-0d060c1c37ea)

[stack@undercloud-0 ~]$ openstack --os-cloud overcloud role add --user user2_admin_in_project2 --project project1 member

[stack@undercloud-0 ~]$ openstack --os-cloud user2_admin_not_in_project1 token issue -f value -c id
gAAAAABi6-aVlJVWAyVaDPVOHNqXb3ho9-93rq5tDOmsXbjZFKo6p1zbjvcBxSjiQhFzrdkwfEZ0h02Ian3GyCeZfJ74P7HnPd0nqYWTBhH48b0g8QQ4JawrZFVp_R2a8nZ6506ys6zX11Cr928gUyzNtnAVJVR6ERNiPts8b9Efs4rG8YAZ8lY

[stack@undercloud-0 ~]$ openstack --os-cloud overcloud role remove --user user2_admin_in_project2 --project project1 member

[stack@undercloud-0 ~]$ curl -X POST http://10.0.0.140:9311/v1/secrets -H 'X-Auth-Token: gAAAAABi6-aVlJVWAyVaDPVOHNqXb3ho9-93rq5tDOmsXbjZFKo6p1zbjvcBxSjiQhFzrdkwfEZ0h02Ian3GyCeZfJ74P7HnPd0nqYWTBhH48b0g8QQ4JawrZFVp_R2a8nZ6506ys6zX11Cr928gUyzNtnAVJVR6ERNiPts8b9Efs4rG8YAZ8lY' -H 'Content-Type: application/json' -d '{"name": "user2secretnew1"'
{"error": {"code": 401, "title": "Unauthorized", "message": "The request you have made requires authentication."}}

Comment with timestamp 2022-08-08 13:48:34 UTC was written here by mistake. Also change of status from new to verified was a mistake.

Hey, sorry for missing the BugZilla.

Yes, the error is still visible. You can use this change to debug the issue:
– https://code.engineering.redhat.com/gerrit/c/keystone/+/420686

Note: This report is related to RPM jobs from Component CI; it is present both for OSP 17.0 and OSP 17.1

What we do in the job, is:
– we fetch the spec file and install the RPM dependencies listed there,
– we install some missing RPMs identified (that should be in spec file probably, but they are not),
– we run the tests defined in tox.

All the packages installed one may find in the jobs logs.
The extra packages are defined here: https://github.com/RedHatCRE/znoyder/blob/f15827520e40442821ec2b416d0b9be80598ae3e/znoyder/config.yml#L375