Open Stack

Hi,

it's your nova.policy file that enables this restriction.

control1:~ # grep -r forced_host /etc/
/etc/nova/policy.json:    "compute:create:forced_host": "is_admin:True",
/etc/nova/policy.json:    "os_compute_api:servers:create:forced_host":  
"rule:admin_api",

Are you trying to use the nova boot command with --availability-zone  
nova:YOUR_COMPUTE_NODE ?
I assume you either have the admin role in that demo project or do it  
as the admin user. If you simply don't specify the availability-zone  
it should work, nova will choose a fitting hypervisor if it finds one.

Regards,
Eugen


Zitat von Jean-Pierre Ribeauville <jpribeauville at axway.com>:

> Hi,
>
> I source  keystonerc_demo  and then I tried to start an instance for  
> a demo project wirh key pair feature , bu using nova boot command.
>
> Then  I got this error :
>
> ERROR (Forbidden): Policy doesn't allow  
> os_compute_api:servers:create:forced_host to be performed.
>
> Under admin , I'm able to create an instance ( with a key-pair  
> belonging to admin)
>
> Is there a way to start an instance via nova boot by using demo user  
> ? ( i.e. by modifying some policy)
>
>
> Thx for help.
>
> Regards,
>
> Jean-Pierre RIBEAUVILLE
>
> +33 1 4717 2049
>
> [axway_logo_tagline_87px]



-- 
Eugen Block                             voice   : +49-40-559 51 75
NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
Postfach 61 03 15
D-22423 Hamburg                         e-mail  : eblock at nde.ag

         Vorsitzende des Aufsichtsrates: Angelika Mozdzen
           Sitz und Registergericht: Hamburg, HRB 90934
                   Vorstand: Jens-U. Mozdzen
                    USt-IdNr. DE 814 013 983