Ask Your Question

Policy doesn't allow compute:create:forced_host to be performed

asked 2014-09-29 08:13:02 -0500

New-stack gravatar image

updated 2014-09-30 10:42:53 -0500

smaffulli gravatar image

I try to run my first instance but an error occuer

[root@cloud98 ~]# source
[root@cloud98 ~]# nova net-list
| ID                                   | Label    | CIDR |
| 1f97cf12-0af9-45ff-aec8-a1ab3d88e23e | demo-net | -    |
| d5b19c47-44b6-4fd1-a27b-24ef9d75eefc | ext-net  | -    |

[root@cloud98 ~]# nova boot --flavor m1.tiny --image cirros-0.3.2-x86_64 --nic net-id=1f97cf12-0af9-45ff-aec8-a1ab3d88e23e --security-group default --key-name demo-key --availability-zone nova:cloud100 test_demo_instance
ERROR: Policy doesn't allow compute:create:forced_host to be performed. (HTTP 403) (Request-ID: req-f3b87d75-a381-4ade-9ef2-3ad41e21a37f)

Some suggestion?

edit retag flag offensive close merge delete


ok :) thanks!

New-stack gravatar imageNew-stack ( 2014-09-30 05:12:15 -0500 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2014-09-29 10:21:29 -0500

larsks gravatar image

The error seems reasonably clear. You are trying to spawn an instance on a specific host. For hopefully obvious reasons (e.g., to prevent someone from hosing a compute host by scheduling all of their resources there), this is a privileged operation by default.

That is, you need admin credentials in order to use explicit host placement.

If you really want to change this behavior in your environment, you can edit /etc/nova/policy.json, and change:

"compute:create:forced_host": "is_admin:True",


"compute:create:forced_host": "",
edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-09-29 08:13:02 -0500

Seen: 9,765 times

Last updated: Sep 30 '14