Skip to content

server: charge snapshot copy primary storage to the snapshot owner ac… - #14036

Open
rootnomad wants to merge 4 commits into
apache:mainfrom
rootnomad:fix/snapshot-copy-resourcecount-account
Open

rootnomad wants to merge 4 commits into
apache:mainfrom
rootnomad:fix/snapshot-copy-resourcecount-account

Conversation

@rootnomad

Copy link
Copy Markdown
Contributor

Description

When a snapshot is copied to an extra primary storage pool (createSnapshot with
storagepoolids), copySnapshotOnPool incremented the primary_storage resource count
using CallContext.getCallingUserId(). That method's first argument is an account
id, but getCallingUserId() returns a user id, and user ids and account ids are
independent sequences. So the usage was charged to whatever account happens to
share the caller's user id, never to the snapshot's real owner, and the delete
path never decrements it. The following guard also compared the user id against
Account.ACCOUNT_ID_SYSTEM.

Charge the snapshot owner's account id, and use the calling account id for the
system check.

Types of changes

  • Bug fix (non-breaking change which fixes an issue)

Feature/Enhancement Scale or Bug Severity

Bug Severity

  • Minor

How Has This Been Tested?

Added a unit test asserting the primary_storage count is charged to the snapshot
owner's account rather than the calling user id. Also built the standard packages
and deployed on a KVM advanced zone.

…count

copySnapshotOnPool passed CallContext.getCallingUserId() to
incrementResourceCount, whose first argument is an account id, not a user id.
User ids and account ids are independent sequences, so the primary_storage
count was charged to whichever account happened to share the caller's user id
(and never to the real owner), corrupting quota accounting. The following
guard also compared the calling user id against Account.ACCOUNT_ID_SYSTEM.
Use the snapshot owner's account id for the count and the calling account id
for the system check.
@rootnomad

Copy link
Copy Markdown
Contributor Author

@DaanHoogland Could you pls take a look at this

Comment thread server/src/main/java/com/cloud/storage/snapshot/SnapshotManagerImpl.java Outdated

@DaanHoogland DaanHoogland left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

clgtm, one nit though

The test is in the same package, so the method does not need to be protected.
@rootnomad

Copy link
Copy Markdown
Contributor Author

Good point, thank you. Made it package-private in 5a5e884.

Comment thread server/src/main/java/com/cloud/storage/snapshot/SnapshotManagerImpl.java Outdated
The resource count already goes to the owner, so the usage event should too,
otherwise an admin copying a user's snapshot is billed for it. Matches the
snapshot create and delete usage events, which also use the owner account.
…ImplTest

Keep a single test suite per class. Move
copySnapshotOnPoolChargesPrimaryStorageToTheSnapshotOwnerAccount into
SnapshotManagerImplTest and drop the separate
SnapshotManagerImplCopyResourceCountTest. The case reuses the mocks already
declared on the suite, so the duplicate mock declarations and the separate
runner are no longer needed.
@DaanHoogland

Copy link
Copy Markdown
Contributor

@blueorangutan package

@blueorangutan

Copy link
Copy Markdown

@DaanHoogland a [SL] Jenkins job has been kicked to build packages. It will be bundled with no SystemVM templates. I'll keep you posted as I make progress.

@codecov

codecov Bot commented Oct 20, 2026 •

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 50.00000% with 1 line in your changes missing coverage. Please review.
✅ Project coverage is 20.21%. Comparing base (3d70ce4) to head (9268030).
⚠️ Report is 118 commits behind head on main.

Files with missing lines Patch % Lines
...om/cloud/storage/snapshot/SnapshotManagerImpl.java 50.00% 1 Missing ⚠️
Additional details and impacted files
@@             Coverage Diff              @@
##              main   #14036       +/-   ##
============================================
+ Coverage     3.53%   20.21%   +16.68%     
- Complexity       0    20750    +20750     
============================================
  Files          487     6426     +5939     
  Lines        41863   580181   +538318     
  Branches      7912    71033    +63121     
============================================
+ Hits          1479   117298   +115819     
- Misses       40170   450167   +409997     
- Partials       214    12716    +12502     
Flag Coverage Δ
uitests 3.69% <ø> (+0.15%) ⬆️
unittests 21.51% <50.00%> (?)

Flags with carried forward coverage won't be shown. Click here to find out more.

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
  • 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

@blueorangutan

Copy link
Copy Markdown

Packaging result [SF]: ✔️ el8 ✔️ el9 ✔️ el10 ✖️ debian ✔️ suse15. SL-JID 19621

@Damans227 Damans227 left a comment

Copy link
Copy Markdown
Collaborator

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thanks @rootnomad, fix looks right. LGTM

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

4 participants