There is currently a known issue where custom SRBAC rules do not permit list shared security groups to non-administrative users that are not rule owners. This causes shared security groups and rules to not be managed properly by non-administrative users that are not rule owners. Workaround: Disable custom SRBAC rules or modify the custom rules to permit any user to manage the rules.
Description of problem:
neutron_tempest_plugin.api.test_security_groups.RbacSharedSecurityGroupTest.test_regular_client_shares_to_another_regular_client[id-2a81795c-2a35-11e9-9d86-acde48001122]
-------------------------------------------------------------------------------------------------------------------------------------------------------------------------
Captured traceback:
~~~~~~~~~~~~~~~~~~~
Traceback (most recent call last):
File "/usr/lib/python3.9/site-packages/neutron_tempest_plugin/api/test_security_groups.py", line 529, in test_regular_client_shares_to_another_regular_client
self.client.show_security_group(sg['id'])
File "/usr/lib/python3.9/site-packages/neutron_tempest_plugin/services/network/json/network_client.py", line 133, in _show
resp, body = self.get(uri)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 314, in get
return self.request('GET', url, extra_headers, headers)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 720, in request
self._error_checker(resp, resp_body)
File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 826, in _error_checker
raise exceptions.NotFound(resp_body, resp=resp)
tempest.lib.exceptions.NotFound: Object not found
Details: {'type': 'HTTPNotFound', 'message': 'The resource could not be found.', 'detail': ''}
Captured pythonlogging:
relate to:
https://bugs.launchpad.net/neutron/+bug/1942615https://review.opendev.org/c/openstack/neutron/+/811242
Comment 12James E. LaBarre
2023-07-31 14:38:08 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.
For information on the advisory (Release of components for Red Hat OpenStack Platform 17.1 (Wallaby)), and where to find the updated
files, follow the link below.
If the solution does not work for you, open a new bug report.
https://access.redhat.com/errata/RHEA-2023:4577
Description of problem: neutron_tempest_plugin.api.test_security_groups.RbacSharedSecurityGroupTest.test_regular_client_shares_to_another_regular_client[id-2a81795c-2a35-11e9-9d86-acde48001122] ------------------------------------------------------------------------------------------------------------------------------------------------------------------------- Captured traceback: ~~~~~~~~~~~~~~~~~~~ Traceback (most recent call last): File "/usr/lib/python3.9/site-packages/neutron_tempest_plugin/api/test_security_groups.py", line 529, in test_regular_client_shares_to_another_regular_client self.client.show_security_group(sg['id']) File "/usr/lib/python3.9/site-packages/neutron_tempest_plugin/services/network/json/network_client.py", line 133, in _show resp, body = self.get(uri) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 314, in get return self.request('GET', url, extra_headers, headers) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 720, in request self._error_checker(resp, resp_body) File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 826, in _error_checker raise exceptions.NotFound(resp_body, resp=resp) tempest.lib.exceptions.NotFound: Object not found Details: {'type': 'HTTPNotFound', 'message': 'The resource could not be found.', 'detail': ''} Captured pythonlogging: relate to: https://bugs.launchpad.net/neutron/+bug/1942615 https://review.opendev.org/c/openstack/neutron/+/811242