Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

Policy doesn't allow [node]:os-hosts to be performed

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: req-6739223e-f3ab-4661-87a8-214e88af1167)

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-0517fa3f-31a4-4773-972e-8bd3bfadbde5 - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

Policy doesn't allow [node]:os-hosts to be performed

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: req-6739223e-f3ab-4661-87a8-214e88af1167)

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-0517fa3f-31a4-4773-972e-8bd3bfadbde5 - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

Policy doesn't allow [node]:os-hosts [node_api]:os-hosts to be performed

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: req-6739223e-f3ab-4661-87a8-214e88af1167)
... )

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-0517fa3f-31a4-4773-972e-8bd3bfadbde5 [req-...  - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

EDIT: It seems "Policy" doesn't allow me to do anything:

# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)

Policy doesn't allow [node_api]:os-hosts [node]:os-hosts to be performed

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: ... )

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-...  - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

EDIT: It seems "Policy" doesn't allow me to do anything:

# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)

EDIT-2: The issue was with the environment. I had sourced the keystonerc_demo file. Once I sourced the keystonerc_admin file I was able to execute all of the commands.

Policy doesn't allow [node]:os-hosts [node_api]:os-hosts to be performed

I just stood up a new compute node and I'm trying to migrate a demo instance to it. I'm following the example here (http://docs.openstack.org/admin-guide-cloud/compute-live-migration-usage.html). One of the steps is to verify that the target node has the capacity to support the migration.

# nova host-describe <node-name>

When I ran this command I got

ERROR (Forbidden): Policy doesn't allow <node_name_api:os-hosts to be performed (HTTP 403) (Request-ID: ... )

The previous command (nova-manage service list) also threw a warning before displaying its results:

No handlers could be found for logger "oslo_config.cfg"
2015-11-21 11:25:55.745 24888 WARNING oslo_config.cfg [req-...  - - - - -] Option "sql_connection" from group "DEFAULT" is deprecated. Use option "connection" from group "database".

Are these releated? Am I supposed to switch to or create a new group called database?

EDIT: It seems "Policy" doesn't allow me to do anything:

# nova live-migration <instance> <node>
Error (Forbidden): Policy doesn't allow <node_api>:os-migrate-server:migrate_live to be performed. (HTTP 403) (Request-ID: ...)

EDIT-2: The issue was with the environment. I had sourced the keystonerc_demo file. Once I sourced the keystonerc_admin file I was able to execute all of the commands.