Sorry haven't used quota in a while, one thought is there a template quota getting used?

Regards,
                 Paul S.
From: Vrgotic, Marko <M.Vrgotic@activevideo.com>
Sent: 13 March 2020 15:15
To: Staniforth, Paul <P.Staniforth@leedsbeckett.ac.uk>; users@ovirt.org <users@ovirt.org>
Cc: Stojchev, Darko <D.Stojchev@activevideo.com>
Subject: Re: oVirt Storage quota problems
 

Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe.

Hey Paul,

 

I did the check for another user that has same issue and what I found out its bit strange:

  • DC1 / infrastructure1 – quota storage_inf1 – user is added in Consumers list   -   gets “2020-03-13 08:26:18,057Z WARN  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA”
  • DC1 / development2 – quota storage_dev2 – user is added in Consumers list – works

 

The following logs confirm that:

 

  • Fails against infrastructure1 :

“2020-03-13 08:26:18,057Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] No permission found for user '699687a1-da37-4b4

0-a86d-dc744208302d' or one of the groups he is member of, when running action 'AddVmFromTemplate', Required permissions are: Action type: 'USER' Action group: 'CONSUME_QUOTA' Object type: '

Quota'  Object ID: '254f2582-839d-11e9-aaa2-00163e4f2a6d'.

2020-03-13 08:26:18,057Z WARN  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3804) [a6ba871a-dc42-4d4b-a01a-a72cd5a45959] Validation of action 'AddVmFromTemplate' failed for user azabaleta@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-13 08:27:03,426Z INFO  [org.ovirt.engine.core.bll.AddVmFromTemplateCommand] (default task-3813) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Lock Acquired to object 'EngineLock:{exclusiveLocks='[azabaleta-runner=VM_NAME]', sharedLocks='[a80c1f1f-9cd3-4e8c-bfe9-670aa36d2aff=DISK, 9c710118-bb68-45aa-bafd-0e90cb07b9cf=TEMPLATE]'}'

  • Works against development2:

 

2020-03-13 08:27:04,323Z INFO  [org.ovirt.engine.core.bll.AddGraphicsDeviceCommand] (default task-3813) [2cd83827] Running command: AddGraphicsDeviceCommand internal: true. Entities affected :  ID: d75c0d37-4640-49b0-afd1-7db27541f4d4 Type: VMAction group EDIT_VM_PROPERTIES with role type USER

2020-03-13 08:27:04,379Z INFO  [org.ovirt.engine.core.dal.dbbroker.auditloghandling.AuditLogDirector] (default task-3813) [2cd83827] EVENT_ID: USER_ADD_VM_STARTED(37), VM azabaleta-runner creation was initiated by azabaleta@ictv.com@ictv.com-authz.

2020-03-13 08:27:04,777Z INFO  [org.ovirt.engine.core.bll.ConcurrentChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Command 'CreateCloneOfTemplate' (id: '806f2e38-fc42-45c3-87ab-20bec50c226c') waiting on child command id: 'd3826f75-1095-4b5f-98c3-973f4683616b' type:'CopyImageGroupWithData' to complete

2020-03-13 08:27:04,777Z INFO  [org.ovirt.engine.core.bll.SerialChildCommandsExecutionCallback] (EE-ManagedThreadFactory-engineScheduled-Thread-39) [1e11522e-b25a-4972-8ff8-1d9a08bd57ca] Command 'CopyImageGroupWithData' (id: 'd3826f75-1095-4b5f-98c3-973f4683616b') waiting on child command id: 'eb9c3360-00a8-4539-bda4-89d70d22da68' type:'CreateVolumeContainer' to complete

2020-03-13 08:27:05,003Z INFO  [org.ovirt.engine.core.bll.network.vm.ReorderVmNicsCommand] (default task-3813) [e9f67a0f-aaf8-45a6-bdae-d501e757a3b6] Running command: ReorderVmNicsCommand internal: false. Entities affected :  ID: d75c0d37-4640-49b0-afd1-7db27541f4d4 Type: VMAction group CREATE_VM with role type USER

 

Please assist as it currently seems the Quota permissions are not working as expected. The Quotas storage_inf1 and storage_dev2 are configured in exact same way, expect that they are for different DataCenters.

 

 

 

From: "Vrgotic, Marko" <M.Vrgotic@activevideo.com>
Date: Thursday, 12 March 2020 at 20:19
To: "Staniforth, Paul" <P.Staniforth@leedsbeckett.ac.uk>
Cc: "users@ovirt.org" <users@ovirt.org>, Darko Stojchev <D.Stojchev@activevideo.com>
Subject: Re: oVirt Storage quota problems

 

Hey Paul,

 

Thank you. I believe I already added him via Consumers tab, but it does not hurt to doublecheck.

Sent from my iPhone



On 12 Mar 2020, at 17:53, Staniforth, Paul <P.Staniforth@leedsbeckett.ac.uk> wrote:

Hello Marko,

                      if you select quota in the administration menu, then select the quota it is using you will see the consumers option and there it will allow you to add users or groups.

 

Chapter 16: Quotas and Service Level Agreement Policy Introduction to Quota. Quota is a resource limitation tool provided with oVirt. Quota may be thought of as a layer of limitations on top of the layer of limitations set by User Permissions.

www.ovirt.org

Regards,

                  Paul S.

From: Vrgotic, Marko <M.Vrgotic@activevideo.com>
Sent: 12 March 2020 15:46
To: users@ovirt.org <users@ovirt.org>
Cc: Stojchev, Darko <D.Stojchev@activevideo.com>
Subject: [ovirt-users] Re: oVirt Storage quota problems

 

Caution External Mail: Do not click any links or open any attachments unless you trust the sender and know that the content is safe.

I fond the following:

 

“2020-03-12 14:03:05,260Z INFO  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] No permission found for user '7f906bbf-d194-425f-b313-08a777b764ab' or one of the groups he is member of, when running action 'AddVm', Required permissions are: Action type: 'USER' Action group: 'CONSUME_QUOTA' Object type: 'Quota'  Object ID: '47b5e9f4-67a4-4b78-abfd-175e3d9de8da'.

2020-03-12 14:03:05,260Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA”

 

Does anyone know which permission setting that is, or under which section belongs, as I cannot found clear check for it under Roles definition?

 

Kindly awaiting your reply.

 

 

-----

kind regards/met vriendelijke groeten

 

Marko Vrgotic
ActiveVideo

 

From: "Vrgotic, Marko" <M.Vrgotic@activevideo.com>
Date: Thursday, 12 March 2020 at 16:28
To: "users@ovirt.org" <users@ovirt.org>
Cc: Darko Stojchev <D.Stojchev@activevideo.com>
Subject: Re: oVirt Storage quota problems

 

Addiitonally, WARN from log file for one of the Users:

 

2020-03-12 14:03:05,218Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3607) [2bb50857-d018-48aa-b4ca-ed6fb5cd76bf] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:05,236Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3583) [4ef095e5-59fa-4c73-9035-c5251372066d] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:05,238Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [a571bd5d-98af-4a92-bf74-40681c208d32] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:05,240Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [a77740ff-e725-4632-a189-cac9979238df] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:05,260Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [b9635e29-4b8a-44c4-9611-e5af362c783c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:30,584Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [90da1953-a2d6-45bb-8a5b-8f8e9a1b7e2c] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:30,597Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [fb938e77-1b95-4405-bebc-b0dd89e99ff0] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:30,600Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [d3c4cd69-134d-49c7-a977-c27d79ce2e24] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:43,460Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3599) [99b158c6-c476-43e4-838f-45cadf73c7e9] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:43,462Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [300289be-d55d-468e-aeda-d845180621e2] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:43,467Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [a6d267af-d14e-44d5-9573-de33a4d45586] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:45,101Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [8efba949-8f58-427b-9add-ead7b54e69d5] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:55,071Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3613) [3444440d-5c3a-4ba7-9a6b-4de6ba71a2cd] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

2020-03-12 14:03:55,093Z WARN  [org.ovirt.engine.core.bll.AddVmCommand] (default task-3608) [34e8e6f9-7a5d-4d86-92bc-a595a3ae7688] Validation of action 'AddVm' failed for user esuilen@ictv.com@ictv.com-authz. Reasons: VAR__ACTION__ADD,VAR__TYPE__VM,USER_NOT_AUTHORIZED_TO_CONSUME_QUOTA

 

 

-----

kind regards/met vriendelijke groeten

 

Marko Vrgotic
ActiveVideo

 

 

From: "Vrgotic, Marko" <M.Vrgotic@activevideo.com>
Date: Thursday, 12 March 2020 at 16:09
To: "users@ovirt.org" <users@ovirt.org>
Cc: Darko Stojchev <D.Stojchev@activevideo.com>
Subject: oVirt Storage quota problems

 

Dear oVirt,

 

I am experiencing  a quota related problem regarding two things:

  1. Quota usage and exception trigger
  2. User assigned as quota consumer

 

First issue:

I have defined quota for storage ( qstorage ), setting all following items:

a.      Defining quota for storage, with threshold and grace

b.      Setting quota mode to enforced in datacenter

c.       Added Users as consumers of the Quota

d.      Updated quota from Default to qstorage for Templates and related images

e.      Updated quota from Default to qstorage from all existing VMs and the related Disks

Problem:

    1. the percentage of the Storage Consumption is jumping up and down, between 3% and 97%, and at certain point goes back to Unlimited
    2. when checking under Storage tab inside quota name, the value “Used MB out of Total MB” is correct, however, when attempting to exceed the threshold, I am not getting a warning, even though I am consumer of a quota

 

Second issue:

     User is added to qstorage quota as consumer. Still, when he tries to launch the VMs, Waring is displayed:

Cannot add VM. The user is not a consumer of the Quota assigned to the resource.

 

Have I missed something – could it be a permission issue, not a consumer issue.

 

All my users are utilizing Administration Portal with limited set of permissions. They all have same Role assigned, but only few of them are having the problem I described as Second problem.

 

Please assist.

 

 

-----

kind regards/met vriendelijke groeten

 

Marko Vrgotic
Sr. System Engineer @ System Administration


ActiveVideo

o: +31 (35) 6774131

e: m.vrgotic@activevideo.com
w: www.activevideo.com

 

ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ Hilversum, The Netherlands. The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited.  If you have received this message in error, please immediately notify the sender and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or destroy any copy of this message.

 

 

 

 

From: "Vrgotic, Marko" <M.Vrgotic@activevideo.com>
Date: Thursday, 27 February 2020 at 10:19
To: "users@ovirt.org" <users@ovirt.org>
Cc: Darko Stojchev <D.Stojchev@activevideo.com>
Subject: oVirt Storage quota questions

 

Dear oVirt,

 

My platform is running SHE oVirt version 4.3.8.

 

Why is my StorageQuota consumption still showing “ 0 out of 3700” ? Did I forget something?

 

<image001.png>

 

 

I have setup storage quota “StorageQuota” for one of domains.

 

It has 4400GB actual storage.

·         Quota is set to 3700GB.

o    Treshold for Quota is 85% and Grace is set to 110%.

·         Datacenter Quota is set to Enforced

·         The template image has been changed from Default to StorageQuota

·         I see that Vms created from Template are automatically assigned StorageQuota

 

To present the following situation in screenshots:

·         Actual Quota:

<image002.png>

·         VMs (more than on the screenshot) which have the StorageQuota assigned:

<image003.png>

·         Templates which have the StorageQuota assigned

<image004.png>

 

Kindly awaiting your reply.

 

Additionally – is there an easy&safe way to update all running VMs quota?

 

-----

kind regards/met vriendelijke groeten

 

Marko Vrgotic
Sr. System Engineer @ System Administration


ActiveVideo

o: +31 (35) 6774131

e: m.vrgotic@activevideo.com
w: www.activevideo.com

 

ActiveVideo Networks BV. Mediacentrum 3745 Joop van den Endeplein 1.1217 WJ Hilversum, The Netherlands. The information contained in this message may be legally privileged and confidential. It is intended to be read only by the individual or entity to whom it is addressed or by their designee. If the reader of this message is not the intended recipient, you are on notice that any distribution of this message, in any form, is strictly prohibited.  If you have received this message in error, please immediately notify the sender and/or ActiveVideo Networks, LLC by telephone at +1 408.931.9200 and delete or destroy any copy of this message.

 

 

To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/

To view the terms under which this email is distributed, please go to:-
http://leedsbeckett.ac.uk/disclaimer/email/