Help overriding Nova policies (Ussuri)

Jérôme BECOT jerome.becot at deveryware.com
Thu Dec 15 09:52:43 UTC 2022


Hello,

I should miss something, and I need some help. I've updated some rules 
that I placed in the /etc/nova/policy.yaml file. I use all defaults for 
the olso policies (ie scope is not enabled).

When I generate the fulle policy with oslopolicy-policy-generator, the 
rules are applied in the generated output. If I test the policy with 
oslopolicy-checker under the user's token, the results matches the 
permissions, but Nova API continue to refuse the operation

Policy check for os_compute_api:os-flavor-manage:create failed with 
credentials

I'm using the openstack cli to make the request (openstack flavor create)

Thanks for your help

J




More information about the openstack-discuss mailing list