Hi, when I use the normal user(with `member` role), and I add a cron trigger to do something with cinder api. But I met the same problem. The error log is as followed:
2019-09-11 03:23:59.589 6 WARNING mistral.actions.openstack.base [req-4097987f-7527-48aa-8e2e-8261eabd8bd4 7c8adfbef47241a7b5e1d3b4e4fe5a09 efa0e71fb6974ad3a252449f8a376927 - - -] Traceback (most recent call last):
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/actions/openstack/base.py", line 115, in run
method = self._get_client_method(self._get_client(context))
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/actions/openstack/base.py", line 84, in _get_client
return self._create_client(context)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/actions/openstack/actions.py", line 233, in _create_client
cinder_endpoint = self.get_service_endpoint()
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/actions/openstack/base.py", line 108, in get_service_endpoint
region_name=self.action_region
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/utils/openstack/keystone.py", line 160, in get_endpoint_for_project
service_catalog = obtain_service_catalog(ctx)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/mistral/utils/openstack/keystone.py", line 229, in obtain_service_catalog
include_catalog=True
File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneclient/v3/tokens.py", line 85, in get_token_data
resp, body = self._client.get(url, headers=headers)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 375, in get
return self.request(url, 'GET', **kwargs)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 534, in request
resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/adapter.py", line 237, in request
return self.session.request(url, method, **kwargs)
File "/var/lib/kolla/venv/lib/python2.7/site-packages/keystoneauth1/session.py", line 890, in request
raise exceptions.from_response(resp, method, url)
Forbidden: You are not authorized to perform the requested action: identity:validate_token. (HTTP 403) (Request-ID: req-e7c8b915-bbc6-4703-96f1-50258a233f62)
: Forbidden: You are not authorized to perform the requested action: identity:validate_token. (HTTP 403) (Request-ID: req-e7c8b915-bbc6-4703-96f1-50258a233f62)
Hi, when I use the normal user(with `member` role), and I add a cron trigger to do something with cinder api. But I met the same problem. The error log is as followed:
2019-09-11 03:23:59.589 6 WARNING mistral. actions. openstack. base [req-4097987f- 7527-48aa- 8e2e-8261eabd8b d4 7c8adfbef47241a 7b5e1d3b4e4fe5a 09 efa0e71fb6974ad 3a252449f8a3769 27 - - -] Traceback (most recent call last): kolla/venv/ lib/python2. 7/site- packages/ mistral/ actions/ openstack/ base.py" , line 115, in run client_ method( self._get_ client( context) ) kolla/venv/ lib/python2. 7/site- packages/ mistral/ actions/ openstack/ base.py" , line 84, in _get_client client( context) kolla/venv/ lib/python2. 7/site- packages/ mistral/ actions/ openstack/ actions. py", line 233, in _create_client service_ endpoint( ) kolla/venv/ lib/python2. 7/site- packages/ mistral/ actions/ openstack/ base.py" , line 108, in get_service_ endpoint name=self. action_ region kolla/venv/ lib/python2. 7/site- packages/ mistral/ utils/openstack /keystone. py", line 160, in get_endpoint_ for_project service_ catalog( ctx) kolla/venv/ lib/python2. 7/site- packages/ mistral/ utils/openstack /keystone. py", line 229, in obtain_ service_ catalog catalog= True kolla/venv/ lib/python2. 7/site- packages/ keystoneclient/ v3/tokens. py", line 85, in get_token_data get(url, headers=headers) kolla/venv/ lib/python2. 7/site- packages/ keystoneauth1/ adapter. py", line 375, in get kolla/venv/ lib/python2. 7/site- packages/ keystoneauth1/ adapter. py", line 534, in request nAdapter, self).request( *args, **kwargs) kolla/venv/ lib/python2. 7/site- packages/ keystoneauth1/ adapter. py", line 237, in request request( url, method, **kwargs) kolla/venv/ lib/python2. 7/site- packages/ keystoneauth1/ session. py", line 890, in request from_response( resp, method, url) validate_ token. (HTTP 403) (Request-ID: req-e7c8b915- bbc6-4703- 96f1-50258a233f 62) validate_ token. (HTTP 403) (Request-ID: req-e7c8b915- bbc6-4703- 96f1-50258a233f 62)
File "/var/lib/
method = self._get_
File "/var/lib/
return self._create_
File "/var/lib/
cinder_endpoint = self.get_
File "/var/lib/
region_
File "/var/lib/
service_catalog = obtain_
File "/var/lib/
include_
File "/var/lib/
resp, body = self._client.
File "/var/lib/
return self.request(url, 'GET', **kwargs)
File "/var/lib/
resp = super(LegacyJso
File "/var/lib/
return self.session.
File "/var/lib/
raise exceptions.
Forbidden: You are not authorized to perform the requested action: identity:
: Forbidden: You are not authorized to perform the requested action: identity: