<div dir="ltr">Hi everyone,<div><br></div><div>I have a rather odd error which has me flummoxed. I'm hoping that someone can point me in the right direction before I rebuild the environment, yet again.<br clear="all"><div>
<br></div></div><div style>The environment I've built has been using the rcbops (folsom branch) chef-cookbooks and is multi-node. While everything has deployed properly I'm stuck with a situation that while keystone responds to my queries, nova refuses.</div>
<div style><br></div><div style>Sample queries are noted here: <a href="http://paste.openstack.org/show/37411/">http://paste.openstack.org/show/37411/</a></div><div style><br></div><div style>I've removed the irrelevant tenants/users. They key is that the admin user is in the admin tenant the same user/tenant is in the admin role for the entire system. And yet somehow I'm stuck with the nova policy errors:</div>
<div style><br></div><div style><div>root@ctpknc001:~# nova flavor-list</div><div>ERROR: Policy doesn't allow compute_extension:flavorextraspecs to be performed. (HTTP 403) (Request-ID: req-bd265806-1a10-44df-826d-4546857920b9)</div>
<div>root@ctpknc001:~# nova host-list</div><div>ERROR: Policy doesn't allow compute_extension:hosts to be performed. (HTTP 403) (Request-ID: req-4f6e4025-b489-4c79-9679-90cbaeb3377f)</div><div><br></div><div style>The flavor-list policy, on inspection, allows listing regardless of who the user is. This is particularly perplexing!</div>
<div style><br></div><div style>If someone has a hint/clue for where the problem might be, please let me know asap.</div><div style><br></div><div style>Best regards,</div><div style><br></div><div style>Jesse</div></div>
</div>