Unable to set permission about nova hypervisor-stats

asked 2016-03-24 09:03:44 -0600

DerpDarako gravatar image

Hello,

I'm getting useless informations from my openstack for monitoring it. I think the running instances number is relevant so I want my user be able to get this number with CLI. But the commands returns me this:

$ nova hypervisor-stats
ERROR (Forbidden): Policy doesn't allow compute_extension:hypervisors to be performed. (HTTP 403)

So i tried to modify policy.json like this:

"compute_extension:hypervisors": "rule:admin_api or role:supervision",

But it's not working, my user still get the error despite his supervision role.

My question is, is it possible to change this permission? I already did many modifications in policy.json and everything works fine?

Anyway, I think it's better to write a script which directly requests in the database instead of getting informations than I don't need.

Best regards,

edit retag flag offensive close merge delete

Comments

whats your exact issue ? you are not able to query hypervisor-stats from a normal user ? If thats the case, policy is only allowing admin user to do that.

Bipin gravatar imageBipin ( 2016-03-25 10:39:38 -0600 )edit

Exactly. I want to request hypervisor*stats from a normal user. I understand that was a policy issue, that's why i changed compute_extension:hypervisors rule in /etc/nova/policy.json... But it didn't work!

DerpDarako gravatar imageDerpDarako ( 2016-03-29 01:55:35 -0600 )edit