Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1008162

Summary: [engine-backend] [external-provider] [glance] engine does not show RHOS public images when configuring glance as an external provider without authentication
Product: Red Hat Enterprise Virtualization Manager Reporter: Elad <ebenahar>
Component: ovirt-engineAssignee: Federico Simoncelli <fsimonce>
Status: CLOSED CURRENTRELEASE QA Contact: Elad <ebenahar>
Severity: medium Docs Contact:
Priority: high    
Version: 3.3.0CC: acanan, acathrow, amureini, ebenahar, fsimonce, iheim, lpeer, Rhev-m-bugs, scohen, yeylon
Target Milestone: ---   
Target Release: 3.3.0   
Hardware: x86_64   
OS: Unspecified   
Whiteboard: storage
Fixed In Version: Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Storage RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
logs and screenshots none

Description Elad 2013-09-15 11:09:29 UTC
Created attachment 797878 [details]
logs and screenshots

Description of problem:
RHEVM should show RHOS public images when importing glance as an external provider to RHEVM without authentication. 

Version-Release number of selected component (if applicable):
rhevm-3.3.0-0.19.master.el6ev.noarch (is13)


How reproducible:
100%

Steps to Reproduce:
1. have a RHOS env. with public images on it and glance installed
2. add a glance images external provider to RHEVM  with no authentication


Actual results:
We cannot see the public images

Expected results:
We should see only the public images

Additional info: logs and screenshots

Comment 1 Itamar Heim 2013-09-16 05:57:09 UTC
does glance let you see public images without authentication?

Comment 2 Elad 2013-09-16 13:28:56 UTC
(In reply to Itamar Heim from comment #1)
> does glance let you see public images without authentication?

They should be exposed to RHEVM without authentication

Comment 3 Federico Simoncelli 2013-09-18 14:55:44 UTC
The problem here is the glance server configuration.

If you want to see public images without any authentication whatsoever you need to disable the keystone authentication.

Moving to ON_QA. To verify this you can either:

- try to see a public image from a different tenant
- reconfigure your server without keystone authentication (and you'll see public images as well, but without authentication)

Comment 4 Elad 2013-09-23 12:32:27 UTC
(In reply to Federico Simoncelli from comment #3)
> The problem here is the glance server configuration.
> 
> If you want to see public images without any authentication whatsoever you
> need to disable the keystone authentication.
> 
> Moving to ON_QA. To verify this you can either:
> 
> - try to see a public image from a different tenant
From a different tenant, I see the public images only when authentication is specified on rhevm
Should I be able to see them also when authentication is not specified on rhevm?

Comment 5 Federico Simoncelli 2013-10-14 16:50:56 UTC
(In reply to Elad from comment #4)
> (In reply to Federico Simoncelli from comment #3)
> > The problem here is the glance server configuration.
> > 
> > If you want to see public images without any authentication whatsoever you
> > need to disable the keystone authentication.
> > 
> > Moving to ON_QA. To verify this you can either:
> > 
> > - try to see a public image from a different tenant
> From a different tenant, I see the public images only when authentication is
> specified on rhevm
> Should I be able to see them also when authentication is not specified on
> rhevm?

No, because no-authentication in the rhevm provider definition means no-authentication on glance as well, and no-authentication on glance means that you're not using the keystone auth flavor at all.

Comment 6 Elad 2013-10-15 07:26:24 UTC
Using RHEVM, public images are shown when using a different tenant.

Verified with RHEVM3.3 is18

Comment 7 Itamar Heim 2014-01-21 22:30:34 UTC
Closing - RHEV 3.3 Released

Comment 8 Itamar Heim 2014-01-21 22:30:35 UTC
Closing - RHEV 3.3 Released

Comment 9 Itamar Heim 2014-01-21 22:33:35 UTC
Closing - RHEV 3.3 Released