Uploaded image for project: 'Apache Ozone'
  1. Apache Ozone
  2. HDDS-11064

Snapshot creation failing with "PERMISSION_DENIED" error on a bucket created pre-upgrade

    XMLWordPrintableJSON

Details

    • Bug
    • Status: Open
    • Major
    • Resolution: Unresolved
    • None
    • None
    • Snapshot

    Description

      Info of the pre-upgrade volume and bucket -

      # ozone sh bucket info srcvolsnap/srcbucksnap
      {
        "metadata" : { },
        "volumeName" : "srcvolsnap",
        "name" : "srcbucksnap",
        "storageType" : "DISK",
        "versioning" : false,
        "usedBytes" : 647262,
        "usedNamespace" : 1,
        "creationTime" : "2024-06-24T07:26:41.045Z",
        "modificationTime" : "2024-06-24T07:26:41.045Z",
        "sourcePathExist" : true,
        "quotaInBytes" : -1,
        "quotaInNamespace" : -1,
        "bucketLayout" : "LEGACY",
        "link" : false
      }
      # ozone sh volume info srcvolsnap
      {
        "metadata" : { },
        "name" : "srcvolsnap",
        "admin" : "user@domain.com",
        "owner" : "root",
        "quotaInBytes" : -1,
        "quotaInNamespace" : -1,
        "usedNamespace" : 1,
        "creationTime" : "2024-06-24T07:26:35.955Z",
        "modificationTime" : "2024-06-24T07:26:35.955Z",
        "acls" : [ {
          "type" : "USER",
          "name" : "root",
          "aclScope" : "ACCESS",
          "aclList" : [ "ALL" ]
        }, {
          "type" : "GROUP",
          "name" : "root",
          "aclScope" : "ACCESS",
          "aclList" : [ "ALL" ]
        } ],
        "refCount" : 0
      }

      Here the volume admin is - 

      "admin" : "user@domain.com"

      After upgrade it is not recognizing the shorthand principal of user and hence throwing error -

      # kinit -kt /path_to_keytab/user.keytab user
      # ozone sh snapshot create srcvolsnap/srcbucksnap snap1
      PERMISSION_DENIED Only bucket owners and Ozone admins can create snapshots 

      Attachments

        Activity

          People

            Unassigned Unassigned
            jyosin Jyotirmoy Sinha
            Votes:
            0 Vote for this issue
            Watchers:
            1 Start watching this issue

            Dates

              Created:
              Updated: