OpenStack Dashboard Charm

false "Deleted" projects in Overview -> Usage Summary

Bug #1939647 reported by Nobuto Murata on 2021-08-12

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	OpenStack Dashboard Charm	New	Undecided	Unassigned

Bug Description

When opening Admin->Overview pane, there are some "Deleted" projects listed. However, those "Deleted" projects are actually there and one of those is "services" project in service_domain for example.

This is confusing and dangerous since it gives a false impression to the cloud admin that those projects can be purged even though it's actually alive and used in other separate domains.

It's not reproducible with devstack so filing a bug against a charm for the time being because it may be domain/admin/policy setup related.

Revision history for this message

Nobuto Murata (nobuto) wrote on 2021-08-12:

charmed_one_with_false_deleted.png Edit (142.4 KiB, image/png)

Revision history for this message

Nobuto Murata (nobuto) wrote on 2021-08-12:

charmed_one_with_service_domain_context.png Edit (143.2 KiB, image/png)

After setting a domain context to service_domain, I can see the previously "Deleted" project as "services" but I lost the visibility of "admin" project instead.

Revision history for this message

Nobuto Murata (nobuto) wrote on 2021-08-12:

not_reproducible_with_devstack.png Edit (121.2 KiB, image/png)

It happens with the Charmed OpenStack when projects in other domains have resources, but it's not reproducible with devstack with the following steps.

$ cat local.conf
[[local|localrc]]
ADMIN_PASSWORD=secret
DATABASE_PASSWORD=$ADMIN_PASSWORD
RABBIT_PASSWORD=$ADMIN_PASSWORD
SERVICE_PASSWORD=$ADMIN_PASSWORD

$ ./stack.sh

$ openstack domain create another_domain

$ openstack project create \
--domain another_domain \
another_project_in_another_domain

$ openstack user create \
    --domain another_domain \
    --project-domain another_domain \
    --project another_project_in_another_domain \
    --password secret \
    another_user

$ openstack role add \
    --user another_user \
    --project another_project_in_another_domain \
    member

$ openstack server create --image cirros-0.5.2-x86_64-disk \
--flavor m1.tiny test-server-by-another-user