Error: Unable to retrieve container list

asked 2014-04-23 11:30:29 -0500

wowuor gravatar image

I have created a Havana multi-node openstack installation with the Swift service enabled. I am able to successfully display the container page in dashboard if my user name is the same as the project name.

But, if the Username is not the same as the project name, I get the following error when I click on the “Containers” menu item within DashBoard.

“Error: Unable to retrieve container list “

If I assign the “SwiftOperator” role to the user, it works.

My question is, “why does a user account with the same name as the project have ability to access/create containers without having the SwiftOperator role assigned?” Is this the design intent? In my installation, if the project is called “test” and the user is called “test”…and the user is only assigned the “_member_” role…it can still list/create the containers.

Thanks in advance for your assistance.

edit retag flag offensive close merge delete

Comments

Can you list the keystone roles assigned to the users and projects in question? That should give a better picture about what is happening.

SamYaple gravatar imageSamYaple ( 2014-04-23 14:04:10 -0500 )edit

Here is the keystone roles and the one assigned to user in question is "_member_" and the project is question is "ace" ~(keystone_admin)]# keystone role-list

+----------------------------------+-----------------+ | id | name | +----------------------------------+-----------------+ | 86d6071f081040eebf390c20f71c29b4 | ResellerAdmin | | ab50705529aa40c5b38e33959b297228 | SwiftOperator | | 9fe2ff9ee4384b1894a90878d3e92bab | _member_ | | ad5ae2bc8da6444d986696ef97150da0 | admin | | d28a94704f294e29b4f3b714a2154e60 | heat_stack_user | +----------------------------------+-----------------+

Here is the tenant list

~(keystone_admin)]# keystone tenant-list +----------------------------------+----------+---------+ | id | name | enabled | +----------------------------------+----------+---------+ | 8de6c26e7ec74d76b9a1a24f9a30901b | CTS | True | | 241dd149353f437a93bb8cf8d2a1c1ed | ISC | True | | 6eb988a9a9a44a0f8229f8a4db5143ef | ace | True | | cd3cde86920545b2a88f831029534517 | admin | True | | d931d18430c64894998fa45fefb279f5 | services | True | +----------------------------------+----------+---------+

Here is what is in the /etc/swift/ proxy-server.conf

[filter:keystone] use = egg:swift#keystoneauth operator_roles = admin, SwiftOperator is_admin = true

wowuor gravatar imagewowuor ( 2014-04-23 14:52:24 -0500 )edit