Policy doesn't allow [node]:os-hosts to be performed
I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html (http://docs.openstack.org/admin-guide...)). One of the steps is to verify that the target node has the capacity to support the migration.
# nova host-describe <node-name>
When I ran this command I got
ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: ... )
The previous command (nova-manage service list
) also threw a warning before displaying its results:
No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-... - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".
Are these releated? Am I supposed to switch to or create a new group called database
?
EDIT: It seems "Policy" doesn't allow me to do anything:
# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)
EDIT-2: The issue was with the environment. I had sourced the keystonerc_demo
file. Once I sourced the keystonerc_admin
file I was able to execute all of the commands.