Ask Your Question
0

Policy doesn't allow [node]:os-hosts to be performed

asked 2015-11-21 15:44:23 -0500

theillien gravatar image

updated 2015-11-21 17:56:38 -0500

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html (http://docs.openstack.org/admin-guide...)). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: ... )

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-...  - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

EDIT: It seems "Policy" doesn't allow me to do anything:

# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)

EDIT-2: The issue was with the environment. I had sourced the keystonerc_demo file. Once I sourced the keystonerc_admin file I was able to execute all of the commands.

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted
0

answered 2015-11-21 17:57:04 -0500

theillien gravatar image

The answer is EDIT-2 in my question.

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2015-11-21 15:44:23 -0500

Seen: 1,297 times

Last updated: Nov 21 '15