Ask Your Question
0

heat api- Access was denied to this resource

asked 2017-06-15 04:02:54 -0500

Deven gravatar image

updated 2017-06-15 23:01:25 -0500

Hi, I have a packstack newton 1 node setup with heat enabled. I am using the admin user & project for stack creation & query.

I am able to create VM using 'openstack stack create' command though when trying to list the stack using heat API i am getting 403 error 'Access was denied to this resource' .

curl http://$openstackIP:8004

{
"versions": [
    {
        "status": "CURRENT",
        "id": "v1.0",
        "links": [
            {
                "href": "http://<openstackIP>:8004/v1/",
                "rel": "self"
            }
        ]
    }
]

}

curl -H "Content-Type: application/json" -H "X-Auth-Token: 39915fd331764a0694f9e0c46a8621ab" http://$openstackIP:8004/v1/caea646b56d84f54b2e7dd5ddd1ddd94/build_info

{
"code": 403,
"error": {
    "message": "Access was denied to this resource.",
    "traceback": null,
    "type": "HTTPForbidden"
},
"explanation": "Access was denied to this resource.",
"title": "Forbidden"

}

openstack stack create -t cirros_updated.yaml -e env.yaml stack_dev

+---------------------+-----------------------------------------------------+

| Field | Value |

+---------------------+-----------------------------------------------------+

| id | d1dc541d-12e5-47cb-a865-3e0cc12e35b5 |

| stack_name | stack_dev |

| description | Simple template to deploy a single compute instance |

| creation_time | 2017-06-14T11:23:13Z |

| updated_time | None |

| stack_status | CREATE_IN_PROGRESS |

| stack_status_reason | Stack CREATE started |

+---------------------+-----------------------------------------------------+

Do i need to setup some user permissions for accessing HEAT API or make changes to any changes to policy.json

Regards, Dev

edit retag flag offensive close merge delete

Comments

Is your tenant ID really caea6localhost:2e7dd5ddd1ddd94?

zaneb gravatar imagezaneb ( 2017-06-15 10:50:21 -0500 )edit

@zaneb it was a typo error. Corrected it

Deven gravatar imageDeven ( 2017-06-15 23:02:14 -0500 )edit

1 answer

Sort by ยป oldest newest most voted
0

answered 2017-06-20 01:28:29 -0500

Deven gravatar image

Found the issue. It is due to the missing tenant_name in authentication request

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

Stats

Asked: 2017-06-15 04:02:54 -0500

Seen: 632 times

Last updated: Jun 20 '17