[Openstack-operators] Folsom ERROR: Policy doesn't allow xxx to be performed

Andrew Glen-Young andrew.glen-young at canonical.com
Fri May 17 19:35:59 UTC 2013


Hello,

On Fri 17-05-2013 21:06 ›, Jesse Pretorius wrote:
> Hi everyone,
> 
> The environment I've built has been using the rcbops (folsom branch)
> chef-cookbooks and is multi-node. While everything has deployed properly
> I'm stuck with a situation that while keystone responds to my queries, nova
> refuses.
> 
> Sample queries are noted here: http://paste.openstack.org/show/37411/
> 
> I've removed the irrelevant tenants/users. They key is that the admin user
> is in the admin tenant the same user/tenant is in the admin role for the
> entire system. And yet somehow I'm stuck with the nova policy errors:
> 
> root at ctpknc001:~# nova flavor-list
> ERROR: Policy doesn't allow compute_extension:flavorextraspecs to be
> performed. (HTTP 403) (Request-ID: req-bd265806-1a10-44df-826d-4546857920b9)
> root at ctpknc001:~# nova host-list
> ERROR: Policy doesn't allow compute_extension:hosts to be performed. (HTTP
> 403) (Request-ID: req-4f6e4025-b489-4c79-9679-90cbaeb3377f)

Are the Keystone credentials in your nova.conf correct?

HTH,

-- 
Regards.
Andrew Glen-Young



More information about the OpenStack-operators mailing list