Open Stack

On 3/4/21 9:09 AM, meberhardt at unl.edu.ar wrote:
> Hi,
> 
> my installation complains about deprecated policies and throw errors 
> when I try to run spacific commands in cli (list projects or list users, 
> for example).
> 
> "You are not authorized to perform the requested action: 
> identity:list_users."
> 
> I tried to fix this by upgrading the keystone policies using 
> oslopolicy-policy-generator and oslopolicy-policy-upgrade. Just found 
> two places where I have those keystone policy files in my sistem: 
> /etc/openstack_dashboard/keystone_policy.json and cd 
> /lib/python3.6/site-packages/openstack_auth/tests/conf/keystone_policy.json

Neither of those files are used by Keystone itself. You'll want to 
create an updated policy.yaml (we strongly recommend YAML over JSON 
these days) in /etc/keystone to get rid of the deprecation warnings.

> 
> I regenerated & upgraded it but Keystone still complains about the old 
> polices. ¿Where are it placed? ¿How I shoud fix it?
> 
> OS: CentOS 8
> Openstack version: Ussuri
> Manual installation
> 
> Thanks,
> 
> Matias
> 
> /* --------------------------------------------------------------- */
> /*                      Matías A. Eberhardt                        */
> /*                                                                 */
> /*                     Centro de Telemática                        */
> /*                      Secretaría General                         */
> /*                UNIVERSIDAD NACIONAL DEL LITORAL                 */
> /*      Pje. Martínez 2652 - S3002AAB Santa Fe - Argentina         */
> /*           tel +54(342)455-4245 - FAX +54(342)457-1240           */
> /* --------------------------------------------------------------- */
> 
>