Duncan, Attila,
Thanks for your response.
We found a issue when using os_priviledge_user_name which is when we sent
this patch
https://review.openstack.org/#/c/156940/
Post that we used admin user, its password and admin tenant in cinder.conf
to make it work
But we thought that using admin creds (esp password) isn't secure in
cinder.conf so we thought of
patching tempest test case, but later while talking with Attila on IRC,
figured that we can use
user 'nova' which is added to admin role in lib/nova as part of devstack
setup
So we plan to test using nova creds.
thanx,
deepak
On Mon, Mar 2, 2015 at 5:24 PM, Duncan Thomas <duncan.tho...@gmail.com>
wrote:
> I'm assuming your mean the following lines in nova policy.js:
> "compute_extension:os-assisted-volume-snapshots:create":"rule:admin_api",
> "compute_extension:os-assisted-volume-snapshots:delete":"rule:admin_api"
>
> These 2 calls are not intended to be made directly via an end user, but
> via cinder, as a privileged user.
>
> Please do not patch tempest, since this is a real bug it is highlighting.
> The fix is to get cinder to use a privileged user account to make this
> call. Please raise a cinder bug.
>
> Thanks
>
>
>
>
>
> Hi,
>
> As part of tempest job " gate-tempest-dsvm-full-glusterfs
> <http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/>"
> run [1], the test case " test_snapshot_create_with_volume_in_use" [2] is
> failing.
> This is because demo user is unable to create online snapshots, due to
> nova policy rules[3].
>
> To avoid this issue we can modify test case, to make "demo" user as an
> admin before creating snapshot and reverting after it finishes.
>
> Another approach is to use privileged user (
> https://review.openstack.org/#/c/156940/) to create online snapshot.
>
> [1]
> http://logs.openstack.org/11/159711/1/experimental/gate-tempest-dsvm-full-glusterfs/b2cb37e/
> [2]
> https://github.com/openstack/tempest/blob/master/tempest/api/volume/test_volumes_snapshots.py#L66
> [3]
> https://github.com/openstack/nova/blob/master/etc/nova/policy.json#L329
>
> --
> Warm Regards,
> Bharat Kumar Kobagana
> Software Engineer
> OpenStack Storage – RedHat India
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: openstack-dev-requ...@lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
