Permissions for Hosted-Engine VM and Storage Domain
by Ravi Shankar Nori
Hi All,
This is in regard to BZ 1511697 - Unable to set permission on all but
Hosted-Engine VM and Storage Domain
The Issue:
---------------
As described in the BZ, inherited permissions for HE VM/SD
lets non SUPER_USER admins perform operations on the VM.
Currently as far as permissions go there is no way to
distinguish between a HE VM/SD and normal VMs/SDs and
there is no way to set permissions only for the HE VM/SD. So
all admins can perform operation on the HE VM/SD.
Proposed Solution:
--------------------------
The proposed solution is to prevent operations on a HE VM/SD for
all users who do not have SUPER_USER system privilages as per [2].
Moving host to maintenance is allowed for all admins and the
HE VM/SD is listed in search queries. Only when performing operations
on the VM/SD we check user permissions.
This requires documentation change as not all admin users can
perform actions on a HE VM/SD.
Please let me know if you have any objections to the proposed change
before it is merged.
Thanks
Ravi
[1] https://bugzilla.redhat.com/show_bug.cgi?id=1511697
[2] https://gerrit.ovirt.org/#/c/97689/
5 years, 10 months
[ OST Failure Report ] [ oVirt Master) ] [ 17-02-2019 ]
by Galit Rosenthal
Hi,
CQ is failing on 'upgrade-from-release-suite-master'
It seems like something has happened with rh-postgresql95-postgresql
The log from the engine:
https://jenkins.ovirt.org/job/ovirt-master_change-queue-tester/12918/arti...
Can someone please take a look at the issue?
Thanks
Galit
Error:
2019-02-16 16:28:06,874-0500 DEBUG
otopi.plugins.otopi.services.systemd systemd.state:130 starting
service rh-postgresql95-postgresql
2019-02-16 16:28:06,874-0500 DEBUG
otopi.plugins.otopi.services.systemd plugin.executeRaw:813 execute:
('/usr/bin/systemctl', 'start', 'rh-postgresql95-postgresql.service'),
executable='None', cwd='None', env=None
2019-02-16 16:28:07,913-0500 DEBUG
otopi.plugins.otopi.services.systemd plugin.executeRaw:863
execute-result: ('/usr/bin/systemctl', 'start',
'rh-postgresql95-postgresql.service'), rc=1
2019-02-16 16:28:07,914-0500 DEBUG
otopi.plugins.otopi.services.systemd plugin.execute:921
execute-output: ('/usr/bin/systemctl', 'start',
'rh-postgresql95-postgresql.service') stdout:
2019-02-16 16:28:07,914-0500 DEBUG
otopi.plugins.otopi.services.systemd plugin.execute:926
execute-output: ('/usr/bin/systemctl', 'start',
'rh-postgresql95-postgresql.service') stderr:
Job for rh-postgresql95-postgresql.service failed because the control
process exited with error code. See "systemctl status
rh-postgresql95-postgresql.service" and "journalctl -xe" for details.
2019-02-16 16:28:07,915-0500 DEBUG otopi.transaction
transaction.abort:119 aborting 'File transaction for
'/var/opt/rh/rh-postgresql95/lib/pgsql/data/pg_hba.conf''
2019-02-16 16:28:07,916-0500 DEBUG otopi.context
context._executeMethod:143 method exception
Traceback (most recent call last):
File "/usr/lib/python2.7/site-packages/otopi/context.py", line 133,
in _executeMethod
method['method']()
File "/usr/share/ovirt-engine/setup/bin/../plugins/ovirt-engine-setup/ovirt-engine/provisioning/postgres.py",
line 201, in _misc
self._provisioning.provision()
File "/usr/share/ovirt-engine/setup/ovirt_engine_setup/engine_common/postgres.py",
line 498, in provision
self.restartPG()
File "/usr/share/ovirt-engine/setup/ovirt_engine_setup/engine_common/postgres.py",
line 399, in restartPG
state=state,
File "/usr/share/otopi/plugins/otopi/services/systemd.py", line 141, in state
service=name,
RuntimeError: Failed to start service 'rh-postgresql95-postgresql'
2019-02-16 16:28:07,918-0500 ERROR otopi.context
context._executeMethod:152 Failed to execute stage 'Misc
configuration': Failed to start service 'rh-postgresql95-postgresql'
2019-02-16 16:28:07,958-0500 DEBUG
otopi.plugins.otopi.debug.debug_failure.debug_failure
debug_failure._notification:100 tcp connections:
id uid local foreign state pid exe
[CQ]: 97705, 6 (ovirt-engine) failed "ovirt-master" system tests, but isn't
the failure root cause
A system test invoked by the "ovirt-master" change queue including change
97705,6 (ovirt-engine) failed. However, this change seems not to be the root
cause for this failure. Change 97719,3 (ovirt-engine) that this change
depends
on or is based on, was detected as the cause of the testing failures.
This change had been removed from the testing queue. Artifacts built from
this
change will not be released until either change 97719,3 (ovirt-engine) is
fixed
and this change is updated to refer to or rebased on the fixed version, or
this
change is modified to no longer depend on it.
For further details about the change see:
https://gerrit.ovirt.org/#/c/97705/6
For further details about the change that seems to be the root cause behind
the
testing failures see:
https://gerrit.ovirt.org/#/c/97719/3
For failed test results see:
http://jenkins.ovirt.org/job/ovirt-master_change-queue-tester/12916/
_______________________________________________
Infra mailing list -- infra(a)ovirt.org
To unsubscribe send an email to infra-leave(a)ovirt.org
Privacy Statement: https://www.ovirt.org/site/privacy-policy/
oVirt Code of Conduct: https://www.ovirt
.org/community/about/community-guidelines/
List Archives: https://lists.ovirt.org/archives/list/infra@ovirt
.org/message/LSBTLNTO6PE723XG5TELUHPXFLZEHODK/
--
GALIT ROSENTHAL
SOFTWARE ENGINEER
Red Hat
<https://www.redhat.com/>
galit(a)gmail.com T: 972-9-7692230
<https://red.ht/sig>
5 years, 10 months
[VDSM] Flaky protocol detector test
by Nir Soffer
Recently this test cause too many random failures. I guess this is
the known issue with handling SUBSCRIBE in protocol detector.
I posted https://gerrit.ovirt.org/c/97099/
To mark it as broken until we have time to dig deeper
======================================================================
FAIL: test_detect_slow_client_concurrency(True)
(protocoldetector_test.AcceptorTests)
----------------------------------------------------------------------
Traceback (most recent call last):
File "/home/jenkins/workspace/vdsm_standard-check-patch/vdsm/tests/testlib.py",
line 142, in wrapper
return f(self, *args)
File "/home/jenkins/workspace/vdsm_standard-check-patch/vdsm/tests/protocoldetector_test.py",
line 167, in test_detect_slow_client_concurrency
self.check_concurrently(self.check_slow_client, use_ssl)
File "/home/jenkins/workspace/vdsm_standard-check-patch/vdsm/tests/protocoldetector_test.py",
line 266, in check_concurrently
self.assertTrue(all(done))
AssertionError: False is not true
-------------------- >> begin captured logging << --------------------
2019-01-19 20:47:16,021 DEBUG (MainThread) [vds.MultiProtocolAcceptor]
Creating socket (host='127.0.0.1', port=0, family=2, socketype=1,
proto=6) (protocoldetector:225)
2019-01-19 20:47:16,022 INFO (MainThread) [vds.MultiProtocolAcceptor]
Listening at 127.0.0.1:46009 (protocoldetector:183)
2019-01-19 20:47:16,023 DEBUG (MainThread) [vds.MultiProtocolAcceptor]
Adding detector <protocoldetector_test.Echo object at 0x7f1bb77f8dd0>
(protocoldetector:210)
2019-01-19 20:47:16,024 DEBUG (MainThread) [vds.MultiProtocolAcceptor]
Adding detector <protocoldetector_test.Uppercase object at
0x7f1bb77f8c90> (protocoldetector:210)
2019-01-19 20:47:16,031 INFO (Thread-61)
[ProtocolDetector.AcceptorImpl] Accepted connection from
127.0.0.1:51950 (protocoldetector:61)
2019-01-19 20:47:16,047 INFO (Thread-61)
[ProtocolDetector.AcceptorImpl] Accepted connection from
127.0.0.1:51952 (protocoldetector:61)
2019-01-19 20:47:16,048 INFO (Thread-61)
[ProtocolDetector.AcceptorImpl] Accepted connection from
127.0.0.1:51954 (protocoldetector:61)
2019-01-19 20:47:16,065 INFO (Thread-61)
[ProtocolDetector.AcceptorImpl] Accepted connection from
127.0.0.1:51956 (protocoldetector:61)
2019-01-19 20:47:16,068 INFO (Thread-61)
[ProtocolDetector.AcceptorImpl] Accepted connection from
127.0.0.1:51958 (protocoldetector:61)
2019-01-19 20:47:16,069 DEBUG (Thread-61) [ProtocolDetector.Detector]
Using required_size=9 (protocoldetector:89)
2019-01-19 20:47:16,097 DEBUG (Thread-61) [ProtocolDetector.Detector]
Using required_size=9 (protocoldetector:89)
2019-01-19 20:47:16,099 DEBUG (Thread-61) [ProtocolDetector.Detector]
Using required_size=9 (protocoldetector:89)
2019-01-19 20:47:16,107 DEBUG (Thread-61) [ProtocolDetector.Detector]
Using required_size=9 (protocoldetector:89)
2019-01-19 20:47:16,109 DEBUG (Thread-61) [ProtocolDetector.Detector]
Using required_size=9 (protocoldetector:89)
2019-01-19 20:47:16,574 INFO (Thread-61) [ProtocolDetector.Detector]
Detected protocol echo from 127.0.0.1:51950 (protocoldetector:125)
2019-01-19 20:47:17,570 DEBUG (Thread-61) [ProtocolDetector.Detector]
Timed out while waiting for data (protocoldetector:94)
2019-01-19 20:47:17,571 DEBUG (Thread-61) [ProtocolDetector.Detector]
Timed out while waiting for data (protocoldetector:94)
2019-01-19 20:47:17,576 DEBUG (Thread-61) [ProtocolDetector.Detector]
Timed out while waiting for data (protocoldetector:94)
2019-01-19 20:47:17,578 DEBUG (Thread-61) [ProtocolDetector.Detector]
Timed out while waiting for data (protocoldetector:94)
--------------------- >> end captured logging << ---------------------
5 years, 10 months
[ OST Failure Report ] [ oVirt Master/4.2 (ovirt-vmconsole) ] [ 15-02-2019 ] [ TEST NAME ]
by Dafna Ron
Hi,
We are failing to deploy hosts in upgrade suites on both master and 4.2 for
project ovirt-vmconsole.
it seems we are missing packages for selinux-policy.
Root cause identified by CQ as: https://gerrit.ovirt.org/#/c/97704/ - spec:
clean up and reorganize
can you please take a look at this issue?
Sandro requested a bug so I opened one:
https://bugzilla.redhat.com/show_bug.cgi?id=1677630
Error:
019-02-14 12:11:42,063-0500 ERROR
otopi.plugins.otopi.packagers.yumpackager yumpackager.error:85 Yum
[u'ovirt-vmconsole-1.0.6-3.el7.noarch requires selinux-policy >=
3.13.1-229.el7_6.9', u'ovirt-vmconsole-1.0.6-3.el7.noarch requires
selinux-policy-base >= 3.13.1-229.el7_6.9']
2019-02-14 12:11:42,063-0500 DEBUG otopi.context
context._executeMethod:142 method exception
Traceback (most recent call last):
File "/tmp/ovirt-8JzESBo7eU/pythonlib/otopi/context.py", line 132,
in _executeMethod
method['method']()
File "/tmp/ovirt-8JzESBo7eU/otopi-plugins/otopi/packagers/yumpackager.py",
line 248, in _packages
self.processTransaction()
File "/tmp/ovirt-8JzESBo7eU/otopi-plugins/otopi/packagers/yumpackager.py",
line 262, in processTransaction
if self._miniyum.buildTransaction():
File "/tmp/ovirt-8JzESBo7eU/pythonlib/otopi/miniyum.py", line 920,
in buildTransaction
raise yum.Errors.YumBaseError(msg)
YumBaseError: [u'ovirt-vmconsole-1.0.6-3.el7.noarch requires
selinux-policy >= 3.13.1-229.el7_6.9',
u'ovirt-vmconsole-1.0.6-3.el7.noarch requires selinux-policy-base >=
3.13.1-229.el7_6.9']
2019-02-14 12:11:42,064-0500 ERROR otopi.context
context._executeMethod:151 Failed to execute stage 'Package
installation': [u'ovirt-vmconsole-1.0.6-3.el7.noarch requires
selinux-policy >= 3.13.1-229.el7_6.9',
u'ovirt-vmconsole-1.0.6-3.el7.noarch requires selinux-policy-base >=
3.13.1-229.el7_6.9']
Thanks,
Dafna
5 years, 10 months
