Hi Min, hi Koushik, Cloudstack is shouting at me: NO EVENT PUBLISH CAN BE WRAPPED WITHIN DB TRANSACTION!
(full stack trace below). I've learned this is happening on our systemvm-persistent-config feature branch because it has commit ffaabdc13fde0f0f7b2667a483006e2a4b805f63 but it does not have commit f585dd266188a134a9c8b911376b066b9d3806e8 yet. I'm now trying to understand what's happening here -- the transaction / concurrency / messaging logic gave me significant headache with its triple negatives, nested transaction scoping and home-grown gates, but I think I got it now. As I understand it, in the olde world, creating an account: * opens a database transaction * creates an account in the db * creates the first user in that account in the db * publishes an event * which is listened to by 0 subscribers * commmits the database transaction * check the user is there * opens a database transaction * find the created user in the database * (auto)closes transaction * returns success if the user is in the db this, err, works, but in some other cases, apparently, there are concerns that the db transaction is open too long while message handling happens. So that's why the warning was added, and follow up on, and so now, creating an account: * opens a database transaction * creates an account in the db * creates the first user in that account in the db * commmits the database transaction * publishes an event * which is still listened to by on average 0 subscribers, but there could be an IAM subscriber * check the user is there * opens a database transaction * find the created user in the database * (auto)closes transaction * returns success if the user is in the db The one possible subscriber for account creation is IAMApiServiceImpl, which when receiving the event * opens a database transaction * adds the account to acl_group_account_map * commits the database transaction * finds the domain for the account * opens a database transaction * finds the domain for the account * (auto)closes transaction * finds the domain groups for the domain * opens a database transaction * finds the domain groups for the domain * (auto)closes transaction * for each domain group * opens a database transaction * adds the account to acl_group_account_map * commits the database transaction in other words, if there's 1 domain group and an enabled IAM thingie, this spreads out "make an account" over 6 transactions. Without IAM thingie its 2 two transactions with a no-op message bus thingie in the middle. Is that correct? If so, I don't understand this at all. The pre-November code doesn't make that much sense to me (why query the database? If you don't trust your database its ACID guarantees...why use transactions? Why do we ever need a message bus between two java components in the same classloader?), but the new code scares me. In the case of errors in between transactions, you can end up with accounts that are not in all the groups they should be in. I imagine I would much rather see the whole thing fail, and the complete api call fail, so that I can re-try it as a whole, than end up with a somehow half-initialized account. I.e. have everything account-management-y happen in one transaction which is rolled back on any failure. Any thoughts? Thanks! Leo (who can't ask Hugo since Hugo is at apachecon/ccceu and he isn't :)) 2014-11-18 13:36:33,145 ERROR [o.a.c.f.m.MessageBusBase] (qtp1734055321-25:ctx-05df2079 ctx-25ea4461 ctx-3aac3268) NO EVENT PUBLISH CAN BE WRAPPED WITHIN DB TRANSACTION! com.cloud.utils.exception.CloudRuntimeException: NO EVENT PUBLISH CAN BE WRAPPED WITHIN DB TRANSACTION! at org.apache.cloudstack.framework.messagebus.MessageBusBase.publish(MessageBusBase.java:167) at com.cloud.user.AccountManagerImpl$2.doInTransaction(AccountManagerImpl.java:1052) at com.cloud.user.AccountManagerImpl$2.doInTransaction(AccountManagerImpl.java:1027) at com.cloud.utils.db.Transaction$2.doInTransaction(Transaction.java:57) at com.cloud.utils.db.Transaction.execute(Transaction.java:45) at com.cloud.utils.db.Transaction.execute(Transaction.java:54) at com.cloud.user.AccountManagerImpl.createUserAccount(AccountManagerImpl.java:1027) at sun.reflect.GeneratedMethodAccessor181.invoke(Unknown Source) at sun.reflect.DelegatingMethodAccessorImpl.invoke(DelegatingMethodAccessorImpl.java:43) at java.lang.reflect.Method.invoke(Method.java:606) at org.springframework.aop.support.AopUtils.invokeJoinpointUsingReflection(AopUtils.java:317) at org.springframework.aop.framework.ReflectiveMethodInvocation.invokeJoinpoint(ReflectiveMethodInvocation.java:183) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:150) at org.apache.cloudstack.network.contrail.management.EventUtils$EventInterceptor.invoke(EventUtils.java:106) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161) at com.cloud.event.ActionEventInterceptor.invoke(ActionEventInterceptor.java:51) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:161) at org.springframework.aop.interceptor.ExposeInvocationInterceptor.invoke(ExposeInvocationInterceptor.java:91) at org.springframework.aop.framework.ReflectiveMethodInvocation.proceed(ReflectiveMethodInvocation.java:172) at org.springframework.aop.framework.JdkDynamicAopProxy.invoke(JdkDynamicAopProxy.java:204) at com.sun.proxy.$Proxy108.createUserAccount(Unknown Source) at org.apache.cloudstack.api.command.admin.account.CreateAccountCmd.execute(CreateAccountCmd.java:178) at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:141) at com.cloud.api.ApiServer.queueCommand(ApiServer.java:691) at com.cloud.api.ApiServer.handleRequest(ApiServer.java:514) at com.cloud.api.ApiServlet.processRequestInContext(ApiServlet.java:273) at com.cloud.api.ApiServlet$1.run(ApiServlet.java:117) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext$1.call(DefaultManagedContext.java:56) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.callWithContext(DefaultManagedContext.java:103) at org.apache.cloudstack.managed.context.impl.DefaultManagedContext.runWithContext(DefaultManagedContext.java:53) at com.cloud.api.ApiServlet.processRequest(ApiServlet.java:114) at com.cloud.api.ApiServlet.doPost(ApiServlet.java:81) at javax.servlet.http.HttpServlet.service(HttpServlet.java:707)