Red Hat Bugzilla – Bug 1503806
OSP11 -> OSP12 upgrade: logging in to Horizon dashboard fails: IOError: [Errno 13] Permission denied: '/etc/openstack-dashboard/nova_policy.json'
Last modified: 2018-02-05 14:15:23 EST
Description of problem: OSP11 -> OSP12 upgrade: logging to Horizon dashboard fails after credentials input showing the 'Something went wrong!' page Checking the container logs we can see: [root@controller-0 stack]# docker exec -it horizon tail -f /var/log/horizon/horizon.log enforcer = _get_enforcer() File "/usr/lib/python2.7/site-packages/openstack_auth/policy.py", line 56, in _get_enforcer enforcer.load_rules() File "/usr/lib/python2.7/site-packages/oslo_policy/policy.py", line 537, in load_rules overwrite=self.overwrite) File "/usr/lib/python2.7/site-packages/oslo_policy/policy.py", line 675, in _load_policy_file self._file_cache, path, force_reload=force_reload) File "/usr/lib/python2.7/site-packages/oslo_policy/_cache_handler.py", line 41, in read_cached_file with open(filename) as fap: IOError: [Errno 13] Permission denied: '/etc/openstack-dashboard/nova_policy.json' Version-Release number of selected component (if applicable): openstack-tripleo-heat-templates-7.0.3-0.20171014102841.el7ost.noarch How reproducible: 100% Steps to Reproduce: 1. Deploy an OSP11 split stack environment with 3 controller, 3 messaging, 3 db, 2 networker, 2 compute, 3 ceph nodes 2. Upgrade to OSP12 3. Open in the browser the Horizon public URL 4. Input the credenaitls and log in Actual results: Something went wrong! An unexpected error has occurred. Try refreshing the page. If that doesn't help, contact your local administrator. Expected results: The dashboard shows up. Additional info: https://review.openstack.org/#/c/507408/ was applied on the system as a fix for bug 1492135
[root@controller-0 stack]# docker exec -it horizon ls -l /etc/openstack-dashboard total 100 -rw-r-----. 1 horizon horizon 5283 Sep 29 18:03 cinder_policy.json drwxr-xr-x. 2 horizon horizon 4096 Oct 17 20:23 enabled -rw-r-----. 1 horizon horizon 1361 Sep 29 18:03 glance_policy.json -rw-r-----. 1 horizon horizon 4544 Sep 29 18:03 heat_policy.json -rw-r-----. 1 horizon horizon 9822 Sep 29 18:03 keystone_policy.json -rwxr-xr-x. 1 apache apache 30534 Oct 18 15:35 local_settings drwxr-x---. 2 horizon horizon 4096 Oct 17 20:23 local_settings.d -rw-r-----. 1 horizon horizon 9551 Sep 29 18:03 neutron_policy.json -rw-r-----. 1 horizon horizon 15717 Sep 29 18:03 nova_policy.json
Backport to pike https://review.openstack.org/#/c/515105
backport to pike merged
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2017:3462