<div dir="ltr">Hello, <br><br>Does application credentials created as member role with access rule need any special permissions to list hypervisors via cli? <br clear="all"><div>Here is the access rule i created for my application credentials <br><br>[<br> {<br> "path": "/v2.1/**",<br> "method": "GET",<br> "service": "compute"<br> }<br>]<br>
<p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><br></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+--------------------------------+---------+--------+-------------------+</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">| ID <span class="gmail-Apple-converted-space"> </span>| Service | Method | Path<span class="gmail-Apple-converted-space"> </span>|</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+--------------------------------+---------+--------+-------------------+</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">| f2417b29f8394281aaa088d7c01059 | compute | POST <span class="gmail-Apple-converted-space"> </span>| /v2.1/hypervisors |</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">| 0cacd63becc04db086cd070db978c5 | compute | POST <span class="gmail-Apple-converted-space"> </span>| /v2.1/servers <span class="gmail-Apple-converted-space"> </span>|</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">| 366abc32faf543b9ab047a83eafe83 | compute | GET<span class="gmail-Apple-converted-space"> </span>| /v2.1/servers <span class="gmail-Apple-converted-space"> </span>|</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">| 4a4258b6a37c49f3816b708efa179f | compute | GET<span class="gmail-Apple-converted-space"> </span>| /v2.1/**<span class="gmail-Apple-converted-space"> </span>|</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">
</span></p><p class="gmail-p1" style="margin:0px;font-variant-numeric:normal;font-variant-east-asian:normal;font-stretch:normal;font-size:11px;line-height:normal;font-family:"MesloLGS NF";color:rgb(0,0,0)"><span class="gmail-s1" style="font-variant-ligatures:no-common-ligatures">+--------------------------------+---------+--------+-------------------+<br><span style="color:rgb(34,34,34);font-family:Arial,Helvetica,sans-serif;font-size:small;font-variant-ligatures:normal">I tried to use other access rule too.</span><br><br></span></p></div>After sourcing the credentials if i would like to list any of the openstack resources it simply does not work <br><br><i>openstack volume list <br>openstack The request you have made requires authentication. (HTTP 401)<br><br>openstack hypervisor list <br>The request you have made requires authentication. (HTTP 401) (Request-ID: req-c4532458-5606-4c85-8f93-20e61f57e2c9)<br></i><br>i think this could be a bug in keystone or it might need any special permissions with access rule.<br><br>Please help will be really appreciated. <br>-- <br><div dir="ltr" class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Thanks and Regards,<div><br></div><div>Hemant Sonawane</div><div><img width="96" height="37" src="https://ci3.googleusercontent.com/mail-sig/AIorK4x8nIGqikcShn_0zvLqn8N5Q_X7samOLi0X9Ztcfux-Zmk47oem97UgQbLfzWjlxQTZ7P3zKhw"><br></div></div></div></div>