Hi,

it's your nova.policy file that enables this restriction.

control1:~ # grep -r forced_host /etc/
/etc/nova/policy.json:    "compute:create:forced_host": "is_admin:True",
/etc/nova/policy.json: "os_compute_api:servers:create:forced_host": "rule:admin_api",

Are you trying to use the nova boot command with --availability-zone nova:YOUR_COMPUTE_NODE ? I assume you either have the admin role in that demo project or do it as the admin user. If you simply don't specify the availability-zone it should work, nova will choose a fitting hypervisor if it finds one.

Regards,
Eugen


Zitat von Jean-Pierre Ribeauville <jpribeauvi...@axway.com>:

Hi,

I source keystonerc_demo and then I tried to start an instance for a demo project wirh key pair feature , bu using nova boot command.

Then  I got this error :

ERROR (Forbidden): Policy doesn't allow os_compute_api:servers:create:forced_host to be performed.

Under admin , I'm able to create an instance ( with a key-pair belonging to admin)

Is there a way to start an instance via nova boot by using demo user ? ( i.e. by modifying some policy)


Thx for help.

Regards,

Jean-Pierre RIBEAUVILLE

+33 1 4717 2049

[axway_logo_tagline_87px]



--
Eugen Block                             voice   : +49-40-559 51 75
NDE Netzdesign und -entwicklung AG      fax     : +49-40-559 51 77
Postfach 61 03 15
D-22423 Hamburg                         e-mail  : ebl...@nde.ag

        Vorsitzende des Aufsichtsrates: Angelika Mozdzen
          Sitz und Registergericht: Hamburg, HRB 90934
                  Vorstand: Jens-U. Mozdzen
                   USt-IdNr. DE 814 013 983


_______________________________________________
Mailing list: http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack
Post to     : openstack@lists.openstack.org
Unsubscribe : http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack

Reply via email to