Cinder netapp driver - Insufficient privileges gathering stats

Bug #1673848 reported by Jorge Martinez
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Mirantis OpenStack
Status tracked in 10.0.x
10.0.x
Confirmed
High
MOS Cinder
9.x
Won't Fix
High
Max Yatsenko

Bug Description

* Detailed bug description:

 Cinder-volume module is spamming the log /var/log/cinder/cinder-volume.log with these messages:

2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode [req-edbef337-f895-4997-8c9e-dc269b7a0d55 - - - - -] Could not get utilization counters from node ESJC-DSNT-SN01P
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode Traceback (most recent call last):
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode File "/usr/lib/python2.7/dist-packages/cinder/volume/drivers/netapp/dataontap/performance/
....
....
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode raise NaApiError(code, msg)
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode NaApiError: NetApp API failed. Reason - 13003:Insufficient privileges: user 'ost-jc2' does not have read access to this resource
2017-03-16 07:36:30.013 5410 ERROR cinder.volume.drivers.netapp.dataontap.performance.perf_cmode

* Steps to reproduce:

 - Configure NFS backend for cinder services on Mitaka (Mirantis 9.1) using cinder_netapp FUel plugin [2]

 - Create the netapp user required for this integration using netapp documentation [3]

 - Start cinder services

 [2] https://github.com/openstack/fuel-plugin-cinder-netapp

 [3] http://netapp.github.io/openstack-deploy-ops-guide/mitaka/content/cinder.fas.configuration.html#cinder.cdot.account_permissions

Expected results:

 No errors are show in the /var/log/cinder/cinder-volume.log

Actual result:

 Log /var/log/cinder/cinder-volume.log being spammed with previous indicated errors.

Reproducibility:

 No action is needed. Log display the error on a rate of 1 per minute.

Workaround:

 None

* Impact:

 Cinder volume log get full of improper error messages.

* Description of the environment:
- Operation system: Unbuntu 14.04 trusty (MOS 9.1)
- Versions of components: cinder versions 2:8.1.0-6~u14.04+mos14
- Reference architecture: cinder using NFS as backend (netapp driver)
- Network model: N/A
- Related projects installed: N/A

* Additional information:

 After reporting this problem to NetApp support, they said is a known bug and patch is now released [4]

 Problem is that the patch seems to apply only to Ocata, maybe nobody else report it with Mitaka yet.

[4] https://review.openstack.org/#/c/433251/1

Tags: area-cinder
tags: added: area-cinder
Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Fix merged to openstack/cinder (10.0/newton)

Reviewed: https://review.fuel-infra.org/32377
Submitter: Pkgs Jenkins <email address hidden>
Branch: 10.0/newton

Commit: 5073b04bf31e59d57f43ec92a2a59d0f5455c6a6
Author: Jose Porrua <email address hidden>
Date: Tue Mar 28 14:23:50 2017

NetApp: Track SVM and Cluster scoped credentials

This fix avoids logging an exception when a user
chooses to use an SVM scoped account. cDOT
driver requires cluster scoped privileges to
gather backend statistics, performance
counters, etc. These APIs are not available for
SVM scoped credentials.

Change-Id: If2e3bae98db225ff0cfc9e868eaaeef088135562
Closes-Bug: #1673848
(cherry picked from commit 0f9b6e9ac2ddfd4f90b1a3a71ec46fa56008aaee)

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Fix proposed to openstack/cinder (9.0/mitaka)

Fix proposed to branch: 9.0/mitaka
Change author: Jose Porrua <email address hidden>
Review: https://review.fuel-infra.org/36303

Revision history for this message
Fuel Devops McRobotson (fuel-devops-robot) wrote : Change abandoned on openstack/cinder (9.0/mitaka)

Change abandoned by Max Yatsenko <email address hidden> on branch: 9.0/mitaka
Review: https://review.fuel-infra.org/36303

Revision history for this message
Max Yatsenko (myatsenko) wrote :

As this issue doesn't affect system functionality and it's not a blocker for component functioning this issue won't be fix.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.