Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1814200

Summary: oVirt quota issue: Not authorized to CONSUME_QUOTA to AddVm or AddVmFromTemplate and User is in Consumers list
Product: [oVirt] ovirt-engine Reporter: Marko Vrgotic <m.vrgotic>
Component: Backend.CoreAssignee: Arik <ahadas>
Status: CLOSED WONTFIX QA Contact: Lucie Leistnerova <lleistne>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 4.3.8.2CC: ahadas, bugs
Target Milestone: ---Flags: pm-rhel: ovirt-4.5?
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2021-08-31 11:15:23 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Virt RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Attachments:
Description Flags
ovirt-engine log file none

Description Marko Vrgotic 2020-03-17 10:57:13 UTC
Created attachment 1670779 [details]
ovirt-engine log file

Description of problem:

In order to avoid VMs betting paused due to lack of storage space, we introduced Storage Quota for our clusters:
 - infrastructure1 - quota storage_inf1
 - development1 - quota storage_dev1
 - development2 - quota storage_dev2

Due to VMPortal lack of list view and few other things, we initially (oVIrt 4.3.1 release) gave all our Users access to AdministrationPortal, limiting what they are allowed to do.

Now, we are seeing reported issue with 2 out of 95 users, all with same permission level.
Both of these Users are in above-mentioned storage quotas Consumers list, but the following occurs (log messages attached):
test1. - Administration portal - cluster infrastructure1 - VM creation fails
test2. - Administration portal - cluster development2 - VM creation works
test3. - VM portal - cluster infrastructrue1 - VM creation works
test4. - VM portal - cluster development2 - VM creation works

Initially, I suspected a missing permission issue, but then I would expect it to fail on the development2 cluster via Administration Portal as well. However, when I made the User a SuperUser, VM creation vai Administration portal on cluster infrastructure1 worked as well.

Same case with both Users.

I am getting bit confused if Quotas are targeted only for Regular Users, utilizing only VM Portal, or are they applicable for all Users, Regular and Administrative access level?

Version-Release number of selected component (if applicable):

python2-ovirt-engine-lib-4.3.8.2-1.el7.noarch
ovirt-engine-extension-aaa-ldap-1.3.10-1.el7.noarch
ovirt-engine-tools-backup-4.3.8.2-1.el7.noarch
ovirt-engine-websocket-proxy-4.3.8.2-1.el7.noarch
ovirt-engine-4.3.8.2-1.el7.noarch
ovirt-ansible-disaster-recovery-1.2.0-1.el7.noarch
ovirt-vmconsole-1.0.7-2.el7.noarch
ovirt-imageio-proxy-1.5.3-0.el7.noarch
ovirt-engine-setup-plugin-vmconsole-proxy-helper-4.3.8.2-1.el7.noarch
ovirt-engine-setup-plugin-websocket-proxy-4.3.8.2-1.el7.noarch
ovirt-engine-wildfly-17.0.1-1.el7.x86_64
ovirt-engine-metrics-1.3.6.4-1.el7.noarch
ovirt-engine-dbscripts-4.3.8.2-1.el7.noarch
ovirt-ansible-vm-infra-1.1.22-1.el7.noarch
ovirt-engine-api-explorer-0.0.5-1.el7.noarch
ovirt-engine-setup-plugin-ovirt-engine-common-4.3.8.2-1.el7.noarch
ovirt-ansible-hosted-engine-setup-1.0.32-1.el7.noarch
ovirt-host-deploy-common-1.8.4-1.el7.noarch
python-ovirt-engine-sdk4-4.3.2-2.el7.x86_64
ovirt-engine-backend-4.3.8.2-1.el7.noarch
python2-ovirt-setup-lib-1.2.0-1.el7.noarch
ovirt-ansible-repositories-1.1.5-1.el7.noarch
ovirt-ansible-shutdown-env-1.0.3-1.el7.noarch
ovirt-imageio-proxy-setup-1.5.3-0.el7.noarch
ovirt-engine-setup-plugin-ovirt-engine-4.3.8.2-1.el7.noarch
ovirt-engine-extension-aaa-ldap-setup-1.3.10-1.el7.noarch
ovirt-engine-vmconsole-proxy-helper-4.3.8.2-1.el7.noarch
python2-ovirt-host-deploy-1.8.4-1.el7.noarch
ovirt-iso-uploader-4.3.2-1.el7.noarch
ovirt-engine-webadmin-portal-4.3.8.2-1.el7.noarch
ovirt-engine-tools-4.3.8.2-1.el7.noarch
ovirt-ansible-infra-1.1.13-1.el7.noarch
ovirt-vmconsole-proxy-1.0.7-2.el7.noarch
ovirt-guest-agent-common-1.0.16-1.el7.noarch
ovirt-ansible-manageiq-1.1.14-1.el7.noarch
ovirt-release43-4.3.8-1.el7.noarch
ovirt-imageio-common-1.5.3-0.el7.x86_64
ovirt-engine-dwh-setup-4.3.8-1.el7.noarch
ovirt-engine-setup-4.3.8.2-1.el7.noarch
ovirt-host-deploy-java-1.8.4-1.el7.noarch
ovirt-engine-ui-extensions-1.0.10-1.el7.noarch
ovirt-ansible-image-template-1.1.12-1.el7.noarch
ovirt-provider-ovn-1.2.29-1.el7.noarch
ovirt-engine-setup-base-4.3.8.2-1.el7.noarch
ovirt-web-ui-1.6.0-1.el7.noarch
ovirt-engine-dwh-4.3.8-1.el7.noarch
ovirt-engine-extension-aaa-jdbc-1.1.10-1.el7.noarch
ovirt-ansible-cluster-upgrade-1.1.14-1.el7.noarch
ovirt-cockpit-sso-0.1.1-1.el7.noarch
ovirt-ansible-engine-setup-1.1.9-1.el7.noarch
ovirt-engine-setup-plugin-cinderlib-4.3.8.2-1.el7.noarch
ovirt-engine-extensions-api-impl-4.3.8.2-1.el7.noarch
ovirt-ansible-roles-1.1.7-1.el7.noarch
ovirt-engine-wildfly-overlay-17.0.1-1.el7.noarch
ovirt-engine-restapi-4.3.8.2-1.el7.noarch

How reproducible:

Not sure - as not all Users have this issue.

Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Part of the logs from test cases above:
2020-03-17 10:25:56,603Z WARN  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4877) [b66e62c7-c3a4-438b-aba8-9f9854180fad] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA
2020-03-17 10:26:35,815Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4876) [7bf6ac03-31b7-4ea6-83c7-21d0ec364d88] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-dev2=VM_NAME]', sharedLocks='[0b57ce66-da11-40c4-ada3-7bb9e894b605=DISK, 10577b5d-3de3-4502-b355-dad2853db75a=TEMPLATE]'}'
2020-03-17 10:26:36,414Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [289b0565] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-quota-dev2 creation was initiated by azabaleta@ictv.com-authz.
2020-03-17 10:26:36,927Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [4ee64122] EVENT_ID: NETWORK_ACTIVATE_VM_INTERFACE_SUCCESS(1,012), Network Interface nic1 (VirtIO) was plugged to VM azabaleta-quota-dev2. (User: azabaleta@ictv.com-authz)
2020-03-17 10:26:36,935Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [4ee64122] EVENT_ID: NETWORK_ADD_VM_INTERFACE(932), Interface nic1 (VirtIO) was added to VM azabaleta-quota-dev2. (User: azabaleta@ictv.com-authz)
2020-03-17 10:26:54,460Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4877) [7703300e] EVENT_ID: USER_VDC_LOGOUT(31), User azabaleta@ictv.com-authz connected from '10.200.145.178' using session '63Sg5ddOACSQfgurSOIeA/cNcG7c6wKtglp5Imk457UE4VfdaheMzJStguCQO4PmMrQV/DVy6BXppzOQW+ZjKw==' logged out.
2020-03-17 10:26:54,483Z INFO  [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-4876) [] User azabaleta@ictv.com successfully logged out
2020-03-17 10:26:54,495Z INFO  [org.ovirt.engine.core.bll.aaa.SessionDataContainer] (default task-4879) [5254c174] Not removing session '63Sg5ddOACSQfgurSOIeA/cNcG7c6wKtglp5Imk457UE4VfdaheMzJStguCQO4PmMrQV/DVy6BXppzOQW+ZjKw==', session has running commands for user 'azabaleta@ictv.com-authz'.
2020-03-17 10:26:59,620Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-34) [] Lock freed to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-dev2=VM_NAME]', sharedLocks='[0b57ce66-da11-40c4-ada3-7bb9e894b605=DISK, 10577b5d-3de3-4502-b355-dad2853db75a=TEMPLATE]'}'
2020-03-17 10:26:59,640Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-34) [] EVENT_ID: USER_ADD_VM_FINISHED_SUCCESS(53), VM azabaleta-quota-dev2 creation has been completed.
2020-03-17 10:27:10,373Z INFO  [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-4877) [] User azabaleta successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access
2020-03-17 10:27:10,640Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4877) [270fedc0] EVENT_ID: USER_VDC_LOGIN(30), User azabaleta@ictv.com-authz connecting from '10.200.145.178' using session 'ag1CgRXAsvWXg72uq+q/bPASWW288TwIOndJd7knWPge+vnPJmF8FhWiZI+WG0Xz/ogn3Fny7Ta8j8vGxKQFRg==' logged in.
2020-03-17 10:27:45,595Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4877) [7cf7e20b-9603-48df-abed-a45ff402ee14] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-inf1=VM_NAME]', sharedLocks='[ecd6b950-8235-4ec9-9c3b-cbc2408a215d=TEMPLATE, 5b92f06d-997a-4cda-9537-be0e45e59721=DISK]'}'
2020-03-17 10:27:46,336Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4877) [7cf7e20b-9603-48df-abed-a45ff402ee14] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-quota-inf1 creation was initiated by azabaleta@ictv.com-authz.
2020-03-17 10:28:22,724Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-70) [] Lock freed to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-inf1=VM_NAME]', sharedLocks='[ecd6b950-8235-4ec9-9c3b-cbc2408a215d=TEMPLATE, 5b92f06d-997a-4cda-9537-be0e45e59721=DISK]'}'
2020-03-17 10:28:22,743Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-70) [] EVENT_ID: USER_ADD_VM_FINISHED_SUCCESS(53), VM azabaleta-quota-inf1 creation has been completed.
2020-03-17 10:29:06,858Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4887) [1c9fd64d-e8ae-43b4-b1ec-06fc3dec1dc9] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabalta-quota-dev2-2 creation was initiated by azabaleta@ictv.com-authz.
2020-03-17 10:30:05,892Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4887) [c7889518-2c41-4c56-904f-18c62e23370a] EVENT_ID: USER_REMOVE_VM_FINISHED(113), VM azabalta-quota-dev2-2 was successfully removed by azabaleta@ictv.com-authz.
2020-03-17 10:30:10,510Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4887) [da3012ae-b0dd-47f5-8a3b-57cdb1c7ef30] EVENT_ID: USER_REMOVE_VM_FINISHED(113), VM azabaleta-quota-inf1 was successfully removed by azabaleta@ictv.com-authz.
2020-03-17 10:30:13,734Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4890) [1a317b46] EVENT_ID: USER_VDC_LOGOUT(31), User azabaleta@ictv.com-authz connected from '10.200.145.178' using session 'ag1CgRXAsvWXg72uq+q/bPASWW288TwIOndJd7knWPge+vnPJmF8FhWiZI+WG0Xz/ogn3Fny7Ta8j8vGxKQFRg==' logged out.
2020-03-17 10:30:13,757Z INFO  [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-4885) [] User azabaleta@ictv.com successfully logged out
2020-03-17 10:30:13,772Z INFO  [org.ovirt.engine.core.bll.aaa.SessionDataContainer] (default task-4888) [29d8f090] Not removing session 'ag1CgRXAsvWXg72uq+q/bPASWW288TwIOndJd7knWPge+vnPJmF8FhWiZI+WG0Xz/ogn3Fny7Ta8j8vGxKQFRg==', session has running commands for user 'azabaleta@ictv.com-authz'.
2020-03-17 10:25:56,603Z WARN  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4877) [b66e62c7-c3a4-438b-aba8-9f9854180fad] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA
2020-03-17 10:26:35,815Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4876) [7bf6ac03-31b7-4ea6-83c7-21d0ec364d88] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-dev2=VM_NAME]', sharedLocks='[0b57ce66-da11-40c4-ada3-7bb9e894b605=DISK, 10577b5d-3de3-4502-b355-dad2853db75a=TEMPLATE]'}'
2020-03-17 10:26:36,414Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [289b0565] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-quota-dev2 creation was initiated by azabaleta@ictv.com-authz.
2020-03-17 10:26:36,927Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [4ee64122] EVENT_ID: NETWORK_ACTIVATE_VM_INTERFACE_SUCCESS(1,012), Network Interface nic1 (VirtIO) was plugged to VM azabaleta-quota-dev2. (User: azabaleta@ictv.com-authz)
2020-03-17 10:26:36,935Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4876) [4ee64122] EVENT_ID: NETWORK_ADD_VM_INTERFACE(932), Interface nic1 (VirtIO) was added to VM azabaleta-quota-dev2. (User: azabaleta@ictv.com-authz)
2020-03-17 10:26:54,460Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4877) [7703300e] EVENT_ID: USER_VDC_LOGOUT(31), User azabaleta@ictv.com-authz connected from '10.200.145.178' using session '63Sg5ddOACSQfgurSOIeA/cNcG7c6wKtglp5Imk457UE4VfdaheMzJStguCQO4PmMrQV/DVy6BXppzOQW+ZjKw==' logged out.
2020-03-17 10:26:54,483Z INFO  [org.ovirt.engine.core.sso.servlets.OAuthRevokeServlet] (default task-4876) [] User azabaleta@ictv.com successfully logged out
2020-03-17 10:26:54,495Z INFO  [org.ovirt.engine.core.bll.aaa.SessionDataContainer] (default task-4879) [5254c174] Not removing session '63Sg5ddOACSQfgurSOIeA/cNcG7c6wKtglp5Imk457UE4VfdaheMzJStguCQO4PmMrQV/DVy6BXppzOQW+ZjKw==', session has running commands for user 'azabaleta@ictv.com-authz'.
2020-03-17 10:26:59,620Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-34) [] Lock freed to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-dev2=VM_NAME]', sharedLocks='[0b57ce66-da11-40c4-ada3-7bb9e894b605=DISK, 10577b5d-3de3-4502-b355-dad2853db75a=TEMPLATE]'}'
2020-03-17 10:26:59,640Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-34) [] EVENT_ID: USER_ADD_VM_FINISHED_SUCCESS(53), VM azabaleta-quota-dev2 creation has been completed.
2020-03-17 10:27:10,373Z INFO  [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-4877) [] User azabaleta successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access
2020-03-17 10:27:10,640Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4877) [270fedc0] EVENT_ID: USER_VDC_LOGIN(30), User azabaleta@ictv.com-authz connecting from '10.200.145.178' using session 'ag1CgRXAsvWXg72uq+q/bPASWW288TwIOndJd7knWPge+vnPJmF8FhWiZI+WG0Xz/ogn3Fny7Ta8j8vGxKQFRg==' logged in.
2020-03-17 10:27:45,595Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4877) [7cf7e20b-9603-48df-abed-a45ff402ee14] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-inf1=VM_NAME]', sharedLocks='[ecd6b950-8235-4ec9-9c3b-cbc2408a215d=TEMPLATE, 5b92f06d-997a-4cda-9537-be0e45e59721=DISK]'}'
2020-03-17 10:27:46,336Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirecto2020-03-17 10:32:16,580Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-59) [9b940c0f-a51b-4c2c-8998-72580657cf47] EVENT_ID: USER_ADD_SYSTEM_PERMISSION(866), User/Group azabaleta was granted permission for Role SuperUser on System by mvrgotic@ictv.com-authz.
2020-03-17 10:32:35,169Z INFO  [org.ovirt.engine.core.sso.utils.AuthenticationUtils] (default task-4890) [] User azabaleta successfully logged in with scopes: ovirt-app-admin ovirt-app-api ovirt-app-portal ovirt-ext=auth:sequence-priority=~ ovirt-ext=revoke:revoke-all ovirt-ext=token-info:authz-search ovirt-ext=token-info:public-authz-search ovirt-ext=token-info:validate ovirt-ext=token:password-access
2020-03-17 10:32:35,397Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4893) [54fd0302] EVENT_ID: USER_VDC_LOGIN(30), User azabaleta@ictv.com-authz connecting from '10.200.145.178' using session 'swB6RHDxHsv26zlGBVLJC3MhcJ4Ix9RMzNT9zfEeDzKV1vNUyJvRJH+pV04VvWrZaEO8U2kwDsUO4796L4d+Zg==' logged in.
2020-03-17 10:33:20,847Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-4896) [0527a18d-e5e8-48cb-b6d2-615c51d18763] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-infra1=VM_NAME]', sharedLocks='[ecd6b950-8235-4ec9-9c3b-cbc2408a215d=TEMPLATE, 5b92f06d-997a-4cda-9537-be0e45e59721=DISK]'}'
2020-03-17 10:33:21,668Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4896) [6d2559d2] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-quota-infra1 creation was initiated by azabaleta@ictv.com-authz.
2020-03-17 10:33:22,970Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4895) [7eba8954] EVENT_ID: NETWORK_ACTIVATE_VM_INTERFACE_SUCCESS(1,012), Network Interface nic1 (VirtIO) was plugged to VM azabaleta-quota-infra1. (User: azabaleta@ictv.com-authz)
2020-03-17 10:33:22,977Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-4895) [7eba8954] EVENT_ID: NETWORK_ADD_VM_INTERFACE(932), Interface nic1 (VirtIO) was added to VM azabaleta-quota-infra1. (User: azabaleta@ictv.com-authz)
2020-03-17 10:33:55,179Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engine-Thread-72) [bdb8b7a2-b65b-483a-8b0a-0435a4718817] EVENT_ID: USER_REMOVE_VM_FINISHED(113), VM azabaleta-quota-dev2 was successfully removed by azabaleta@ictv.com-authz.
2020-03-17 10:33:57,632Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [] Lock freed to object 'EngineLock:{exclusiveLocks='[azabaleta-quota-infra1=VM_NAME]', sharedLocks='[ecd6b950-8235-4ec9-9c3b-cbc2408a215d=TEMPLATE, 5b92f06d-997a-4cda-9537-be0e45e59721=DISK]'}'
2020-03-17 10:33:57,651Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (EE-ManagedThreadFactory-engineScheduled-Thread-64) [] EVENT_ID: USER_ADD_VM_FINISHED_SUCCESS(53), VM azabaleta-quota-infra1 creation has been completed.

The storage quotas are also applied to previously existing VMs, Disk images and Templates.

Full logs attached.

Comment 1 RHEL Program Management 2020-03-17 12:33:57 UTC
The documentation text flag should only be set after 'doc text' field is provided. Please provide the documentation text and set the flag to '?' again.

Comment 2 Marko Vrgotic 2020-03-24 08:27:49 UTC
Hi RedHat,

Not sure if the above was a question to me, but I am not reporting Documentation bug but actual software bug.

If you need me to provide more data, logs, conf files, I have three platforms deployed, all having same issue.

Marko Vrgotic

Comment 3 Marko Vrgotic 2020-04-06 07:19:57 UTC
Dear RedHat and oVirt,

Considering this COVID-19 situation, I hope you are all doing well and staying healthy.

It has been more than two weeks since I reported this issue. So far I have not received a single update or request, and the issue is still registered as NEW. 

Considering this is one out of three issues regarding oVirt quotas, that I reported, in one day, not getting any update leads me to assumptions:

- I am doing something fundamentally wrong with oVirt Quotas implementation
- There is something fundamentally wrong with oVirt Quotas implementation, from the software side.
- something else…

In any case, I would highly appreciate it if you can find time to look into these issues so we can make progress.

Once again, I am seeing this problem on all three deployed platforms, both in Staging and Production.

Kindly awaiting your reply.

Marko Vrgotic
ActiveVideo

Comment 4 Ryan Barry 2020-04-06 07:23:54 UTC
Marko -

Less that, and more that as we push to get 4.4 out (with quota bugs this late not as blockers), there hasn't been capacity to triage these.

It's tentatively targeted to 4.5.0, and may make it back to 4.4.z, but honestly needs a look once we have some time after GA

Comment 5 Marko Vrgotic 2020-04-06 07:46:37 UTC
Hi Ryan,

Thank you for the update.

Marko

Comment 6 Marko Vrgotic 2020-07-14 14:49:22 UTC
Hi all,

Is this still targeted for 4.5?
If additional information is required, just let me know.

Kindly awaiting your reply.

Marko

Comment 7 Arik 2021-03-21 16:13:53 UTC
Marko, goes it still happen?

Comment 8 Marko Vrgotic 2021-03-29 08:07:21 UTC
Hi Arik,

I have to set quotas to Enforce again. I have not received a reply for a long time to my quota issues raised,so I set them back to Audit.
The audit should display this message regardless.

I am pretty sure it still happens, but for sake of certainty, let me double check.

Comment 9 Michal Skrivanek 2021-08-20 11:01:40 UTC
This bug/RFE is more than a year old and it didn't get enough attention so far, and is now flagged as pending close. 
Please review if it is still relevant and provide additional details/justification/patches if you believe it should get more attention for the next oVirt release.

Comment 10 Arik 2021-08-31 11:15:23 UTC
It could be that the administration portal shows Quotas that the user can't access
This is not a typical scenario that users use the administration portal and administrators are likely to have access to different quota, so this issue doesn't seem to worth the effort