Details
-
Bug
-
Resolution: Unresolved
-
Major
-
5.5.0, 5.5.1, 5.5.2, 5.5.3, 5.5.4, 5.5.5, 5.5.6, 6.0.0, 6.0.1, 6.0.2, 6.0.3, 6.0.4, 6.5.1, 6.6.0, 6.5.0
-
Untriaged
-
Unknown
Description
1. Create a 1-node cluster with all services initialized
2. Create default bucket and load it
3. Create a RBAC user with role 'Data Backup & Restore' on default
4. Try to backup the cluster using cbbackupmgr - error:
018-10-12T23:02:32.413+00:00 [INFO][FDB] Forestdb closed database file /tmp/entbackup/backup/2018-10-12T23_02_29.766904304Z/default-500bc771ef6468e83e92b496f6f6e56d/data/shard_0.fdb
2018-10-12T23:02:32.414+00:00 (Plan) Data transfer completed after 2.117670137s
2018-10-12T23:02:32.415+00:00 (Plan) Transfering Eventing metadata
2018-10-12T23:02:32.416+00:00 (Rest) GET http://10.111.170.101:8091/pools/default/nodeServices 200
2018-10-12T23:02:32.418+00:00 (Rest) GET http://10.111.170.101:8096/api/v1/export 403
2018-10-12T23:02:32.418+00:00 ERRO: : – plan.(*events).execute() at events.go:43
2018-10-12T23:02:32.418+00:00 (Plan) Transfer plan failed due to error :
2018-10-12T23:02:32.418+00:00 (Cmd) Error backing up cluster: :
Looks like 'Data backup & Restore role' is not given access to eventing service as it is returning 403 - backup works fine only if we give the user full admin access - even if we give all other roles except full admin it does not work
server logs: https://s3.amazonaws.com/bugdb/jira/oct12/collectinfo-2018-10-12T232013-ns_1%40127.0.0.1.zip
attaching logs and screenshots
Attachments
Issue Links
Gerrit Reviews
For Gerrit Dashboard: MB-31639 | ||||||
---|---|---|---|---|---|---|
# | Subject | Branch | Project | Status | CR | V |
101355,2 | MB-31639 add cluster.eventing.functions!manage to data_backup role | vulcan | ns_server | Status: MERGED | +2 | +1 |
101364,3 | MB-31639 Leverage cbauth.SendForbidden to respond to 403 | unstable | eventing | Status: MERGED | +2 | +1 |
101469,2 | MB-31803: Merge remote-tracking branch 'vulcan'. | alice | ns_server | Status: MERGED | +2 | +1 |
101503,1 | MB-31803: Merge remote-tracking branch alice. | master | ns_server | Status: MERGED | +2 | +1 |
102665,2 | MB-32303: Revert "MB-31639 add cluster.eventing.functions!manage to data_backup role" | vulcan | ns_server | Status: MERGED | +2 | +1 |
102666,2 | Merge remote-tracking branch 'gerrit/vulcan' | alice | ns_server | Status: MERGED | +2 | +1 |
102709,2 | Merge remote-tracking branch 'gerrit/alice' | master | ns_server | Status: MERGED | +2 | +1 |
103163,1 | MB-32303: Revert "MB-31639 add cluster.eventing.functions!manage to data_backup role" | alice | ns_server | Status: ABANDONED | 0 | 0 |