Verified Update and Delete calls: (user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret store --name secretCreatedFromSRCUser1 +---------------+------------------------------------------------------------------------+ | Field | Value | +---------------+------------------------------------------------------------------------+ | Secret href | http://10.0.0.140:9311/v1/secrets/a96e7805-aae8-4753-84dc-677b0cc54c9f | | Name | secretCreatedFromSRCUser1 | | Created | None | | Status | None | | Content types | None | | Algorithm | aes | | Bit length | 256 | | Secret type | opaque | | Mode | cbc | | Expiration | None | +---------------+------------------------------------------------------------------------+ (user1_admin_in_project1) [stack@undercloud-0 ~]$ . user_2_rc (user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret store --name secretCreatedFromSRCUser2 +---------------+------------------------------------------------------------------------+ | Field | Value | +---------------+------------------------------------------------------------------------+ | Secret href | http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38 | | Name | secretCreatedFromSRCUser2 | | Created | None | | Status | None | | Content types | None | | Algorithm | aes | | Bit length | 256 | | Secret type | opaque | | Mode | cbc | | Expiration | None | +---------------+------------------------------------------------------------------------+ (user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret update http://10.0.0.140:9311/v1/secrets/a96e7805-aae8-4753-84dc-677b0cc54c9f 'TestPayload-updated' 4xx Client error: Forbidden: Secret update attempt not allowed - please review your user/project privileges Forbidden: Secret update attempt not allowed - please review your user/project privileges (user2_admin_in_project2) [stack@undercloud-0 ~]$ source user_1_rc (user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret update http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38 'TestPayload-updated' 4xx Client error: Forbidden: Secret update attempt not allowed - please review your user/project privileges Forbidden: Secret update attempt not allowed - please review your user/project privileges (user1_admin_in_project1) [stack@undercloud-0 ~]$ openstack secret delete http://10.0.0.140:9311/v1/secrets/1a314568-7d38-4d41-a1a8-804eae739d38 4xx Client error: Forbidden: Secret deletion attempt not allowed - please review your user/project privileges Forbidden: Secret deletion attempt not allowed - please review your user/project privileges (user1_admin_in_project1) [stack@undercloud-0 ~]$ source user_2_rc (user2_admin_in_project2) [stack@undercloud-0 ~]$ openstack secret delete http://10.0.0.140:9311/v1/secrets/78052294-66ba-4024-86e8-a9f2e51453d6 4xx Client error: Forbidden: Secret deletion attempt not allowed - please review your user/project privileges Forbidden: Secret deletion attempt not allowed - please review your user/project privileges Verifying add: [stack@undercloud-0 ~]$ openstack --os-cloud overcloud role assignment list --user user2_admin_in_project2 --project project1 [stack@undercloud-0 ~]$ openstack --os-cloud user2_admin_not_in_project1 token issue -c id -f value The request you have made requires authentication. (HTTP 401) (Request-ID: req-3ce62a45-7dc2-41e4-a2d5-0d060c1c37ea) [stack@undercloud-0 ~]$ openstack --os-cloud overcloud role add --user user2_admin_in_project2 --project project1 member [stack@undercloud-0 ~]$ openstack --os-cloud user2_admin_not_in_project1 token issue -f value -c id gAAAAABi6-aVlJVWAyVaDPVOHNqXb3ho9-93rq5tDOmsXbjZFKo6p1zbjvcBxSjiQhFzrdkwfEZ0h02Ian3GyCeZfJ74P7HnPd0nqYWTBhH48b0g8QQ4JawrZFVp_R2a8nZ6506ys6zX11Cr928gUyzNtnAVJVR6ERNiPts8b9Efs4rG8YAZ8lY [stack@undercloud-0 ~]$ openstack --os-cloud overcloud role remove --user user2_admin_in_project2 --project project1 member [stack@undercloud-0 ~]$ curl -X POST http://10.0.0.140:9311/v1/secrets -H 'X-Auth-Token: gAAAAABi6-aVlJVWAyVaDPVOHNqXb3ho9-93rq5tDOmsXbjZFKo6p1zbjvcBxSjiQhFzrdkwfEZ0h02Ian3GyCeZfJ74P7HnPd0nqYWTBhH48b0g8QQ4JawrZFVp_R2a8nZ6506ys6zX11Cr928gUyzNtnAVJVR6ERNiPts8b9Efs4rG8YAZ8lY' -H 'Content-Type: application/json' -d '{"name": "user2secretnew1"' {"error": {"code": 401, "title": "Unauthorized", "message": "The request you have made requires authentication."}}
Comment with timestamp 2022-08-08 13:48:34 UTC was written here by mistake. Also change of status from new to verified was a mistake.
Hey, sorry for missing the BugZilla. Yes, the error is still visible. You can use this change to debug the issue: – https://code.engineering.redhat.com/gerrit/c/keystone/+/420686 Note: This report is related to RPM jobs from Component CI; it is present both for OSP 17.0 and OSP 17.1 What we do in the job, is: – we fetch the spec file and install the RPM dependencies listed there, – we install some missing RPMs identified (that should be in spec file probably, but they are not), – we run the tests defined in tox. All the packages installed one may find in the jobs logs. The extra packages are defined here: https://github.com/RedHatCRE/znoyder/blob/f15827520e40442821ec2b416d0b9be80598ae3e/znoyder/config.yml#L375