Bug 2108975 - all tests fail with "Policy does not allow this request to be performed"
Summary: all tests fail with "Policy does not allow this request to be performed"
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-octavia
Version: 17.0 (Wallaby)
Hardware: Unspecified
OS: Unspecified
high
high
Target Milestone: ga
: 17.0
Assignee: Gregory Thiemonge
QA Contact: Bruna Bonguardo
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2022-07-20 07:49 UTC by Gregory Thiemonge
Modified: 2022-09-21 12:24 UTC (History)
9 users (show)

Fixed In Version: openstack-octavia-8.0.2-0.20220727170807.3b2f562.el9ost
Doc Type: If docs needed, set a value
Doc Text:
If this bug requires documentation, please select an appropriate Doc Type value.OSP-17717
Clone Of:
Environment:
Last Closed: 2022-09-21 12:24:05 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
RDO 44096 0 None None None 2022-07-20 08:04:42 UTC
Red Hat Issue Tracker OSP-17709 0 None None None 2022-07-20 08:17:08 UTC
Red Hat Issue Tracker OSP-17717 0 None None None 2022-07-26 14:26:47 UTC
Red Hat Product Errata RHEA-2022:6543 0 None None None 2022-09-21 12:24:25 UTC

Description Gregory Thiemonge 2022-07-20 07:49:16 UTC
Description of problem:

All the jobs are failing with "Policy does not allow this request to be performed" errors

ex:

octavia_tempest_plugin.tests.api.v2.test_flavor.FlavorAPITest.test_flavor_list[id-3ef040ee-fe7e-457b-a56f-8b152f7afa3b]

Traceback (most recent call last):
  File "/home/stack/plugins/octavia/octavia_tempest_plugin/tests/RBAC_tests.py", line 75, in _check_allowed
    method(*args, **kwargs)
  File "/home/stack/plugins/octavia/octavia_tempest_plugin/common/decorators.py", line 42, in wrapper
    return f(*func_args, **func_kwargs)
  File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/flavor_client.py", line 150, in list_flavors
    return self._list_objects(query_params=query_params,
  File "/home/stack/plugins/octavia/octavia_tempest_plugin/services/load_balancer/v2/base_client.py", line 207, in _list_objects
    response, body = self.get(request_uri)
  File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 314, in get
    return self.request('GET', url, extra_headers, headers)
  File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 720, in request
    self._error_checker(resp, resp_body)
  File "/usr/lib/python3.9/site-packages/tempest/lib/common/rest_client.py", line 821, in _error_checker
    raise exceptions.Forbidden(resp_body, resp=resp)
tempest.lib.exceptions.Forbidden: Forbidden
Details: {'faultcode': 'Client', 'faultstring': 'Policy does not allow this request to be performed.', 'debuginfo': None}

A new policy file was recently added in the Octavia RPM to prepare the sRBAC support but it breaks the non sRBAC jobs. This change needs to be reverted to fix the default jobs.


Version-Release number of selected component (if applicable):
17.0

How reproducible:
100%

Steps to Reproduce:
1. deploy OSP17 with Octavia
2. runs the tempest suite
3.

Comment 15 errata-xmlrpc 2022-09-21 12:24:05 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory (Release of components for Red Hat OpenStack Platform 17.0 (Wallaby)), and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2022:6543


Note You need to log in before you can comment on or make changes to this bug.