| opendevreview | Gabriel Adrian Samfira proposed openstack/horizon master: Properly set session value for services_region https://review.opendev.org/c/openstack/horizon/+/899228 | 07:45 |
|---|---|---|
| gsamfira | hi folks! I proposed a trivial fix for an issue that caused a bit of panic to our customers after we added additional OpenStack regions and found their dashboards empty after logging in :D | 08:05 |
| gsamfira | the PR is here: https://review.opendev.org/c/openstack/horizon/+/899228 | 08:06 |
| gsamfira | if anyone can spare a minute to review this 4 line change, it would be great | 08:06 |
| gsamfira | worth mentioning that this happens on a shared keystone, multi region deployment. On a multi-keystone multi region deployment where each keystone has one region, it will probably not happen. | 08:08 |
| opendevreview | Ashish Gupta proposed openstack/horizon master: Add zuul job for pytest based test and fix initial errors https://review.opendev.org/c/openstack/horizon/+/899126 | 08:45 |
| opendevreview | Dmitriy Rabotyagov proposed openstack/horizon master: Fixing Incorrect URL when browsing Swift containers https://review.opendev.org/c/openstack/horizon/+/886891 | 09:05 |
| qwebirc21883 | Hi Everyone, I am working on getting a custom project manager role in an all in one zed environment to work, just to be able to update project details, manager members of the project, and thats about it. My policies are not working however and I am just getting a forbidden error from the logs. Any ideas on what I may be missing? | 15:02 |
| vishalmanchanda | qwebirc21883: hi, where are you updating policy rules? | 15:04 |
| qwebirc21883 | In /etc/openstack-dashboard and /etc/keystone | 15:05 |
| vishalmanchanda | I see. | 15:06 |
| qwebirc21883 | in /etc/openstack-dashboard/ my policy file is keystone_policy.yaml and in /etc/keystone my policy file is policy.yaml | 15:06 |
| vishalmanchanda | are you getting the same error if you use CLI? | 15:06 |
| qwebirc21883 | Hm, haven't tested in the CLI yet, as the requirement is to get it to work in Horizon, but I can give it a try | 15:10 |
| vishalmanchanda | yeah, let's see if you are getting the same error from the cli, then it maybe not horizon issue. | 15:11 |
| qwebirc21883 | No issues in the CLI | 15:19 |
| qwebirc21883 | vishalmanchanda: When I look in the logs as well, I am only seeing errors in Horizon and not in Keystone | 15:20 |
| vishalmanchanda | what error msg you are getting in logs for horizon? | 15:23 |
| vishalmanchanda | Also you have updated the policy rules here as well https://github.com/openstack/horizon/blob/stable/zed/openstack_dashboard/conf/keystone_policy.yaml ? | 15:24 |
| vishalmanchanda | https://github.com/openstack/horizon/blob/stable/zed/openstack_dashboard/conf/default_policies/keystone.yaml | 15:24 |
| qwebirc21883 | Unauthorized: Traceback (most recent call last): File "/var/lib/kolla/venv/lib/python3.10/site-packages/openstack_dashboard/dashboards/identity/projects/views.py", line 179, in get_initial project_i | 15:26 |
| qwebirc21883 | Oh sorry Hold on | 15:26 |
| qwebirc21883 | Forbidden: /identity/6d1319a8736a4305a1a87300ffd734c7/update/ | 15:27 |
| qwebirc21883 | No I haven't updated the default policies, I thought the policies in openstack-dashboard were supposed to override the defaults? | 15:29 |
| vishalmanchanda | Could you update those and try again? | 15:29 |
| qwebirc21883 | Sure | 15:29 |
| vishalmanchanda | hello everyone, we have 1 hour PTG slot for today at 16 UTC in icehouse room | 15:39 |
| vishalmanchanda | Please join if you have any topic for discussion, I will be there in the meeting | 15:39 |
Generated by irclog2html.py 2.17.3 by Marius Gedminas - find it at https://mg.pov.lt/irclog2html/!