On 3/4/21 9:09 AM, meberhardt@unl.edu.ar wrote:
Hi,
my installation complains about deprecated policies and throw errors when I try to run spacific commands in cli (list projects or list users, for example).
"You are not authorized to perform the requested action: identity:list_users."
I tried to fix this by upgrading the keystone policies using oslopolicy-policy-generator and oslopolicy-policy-upgrade. Just found two places where I have those keystone policy files in my sistem: /etc/openstack_dashboard/keystone_policy.json and cd /lib/python3.6/site-packages/openstack_auth/tests/conf/keystone_policy.json
Neither of those files are used by Keystone itself. You'll want to create an updated policy.yaml (we strongly recommend YAML over JSON these days) in /etc/keystone to get rid of the deprecation warnings.
I regenerated & upgraded it but Keystone still complains about the old polices. ¿Where are it placed? ¿How I shoud fix it?
OS: CentOS 8 Openstack version: Ussuri Manual installation
Thanks,
Matias
/* --------------------------------------------------------------- */ /* Matías A. Eberhardt */ /* */ /* Centro de Telemática */ /* Secretaría General */ /* UNIVERSIDAD NACIONAL DEL LITORAL */ /* Pje. Martínez 2652 - S3002AAB Santa Fe - Argentina */ /* tel +54(342)455-4245 - FAX +54(342)457-1240 */ /* --------------------------------------------------------------- */