uploading the result for oslo generated yaml format file works fine and json format file end up with 403 (this bug) .
--format yaml
openstack@openstack-VirtualBox:/opt/stack/nova$ oslopolicy-sample-generator --namespace nova --format yaml --output-file /etc/nova/policy.yaml openstack@openstack-VirtualBox:/opt/stack/nova$ vi /etc/nova/nova.conf openstack@openstack-VirtualBox:/opt/stack/nova$ grep policy /etc/nova/nova.conf[oslo_policy] policy_file=/etc/nova/policy.yaml openstack@openstack-VirtualBox:/opt/stack/nova$ nova hypervisor-list +--------------------------------------+----------------------+-------+---------+ | ID | Hypervisor hostname | State | Status | +--------------------------------------+----------------------+-------+---------+ | 5b3388dc-5149-45dd-ba88-2c4ff9ec9f12 | openstack-VirtualBox | up | enabled | +--------------------------------------+----------------------+-------+---------+ openstack@openstack-VirtualBox:/opt/stack/nova$
--format json
openstack@openstack-VirtualBox:/opt/stack/nova$ oslopolicy-sample-generator --namespace nova --format json --output-file /etc/nova/policy.json openstack@openstack-VirtualBox:/opt/stack/nova$ grep policy /etc/nova/nova.conf[oslo_policy] policy_file=/etc/nova/policy.json openstack@openstack-VirtualBox:/opt/stack/nova$ nova hypervisor-list ERROR (Forbidden): Policy doesn't allow os_compute_api:os-hypervisors:list to be performed. (HTTP 403) (Request-ID: req-7df8af5d-5ac8-4827-a5c5-62187807e019) openstack@openstack-VirtualBox:/opt/stack/nova$
uploading the result for oslo generated yaml format file works fine and json format file end up with 403 (this bug) .
--format yaml
openstack@ openstack- VirtualBox: /opt/stack/ nova$ oslopolicy- sample- generator --namespace nova --format yaml --output-file /etc/nova/ policy. yaml openstack- VirtualBox: /opt/stack/ nova$ vi /etc/nova/nova.conf openstack- VirtualBox: /opt/stack/ nova$ grep policy /etc/nova/ nova.conf[ oslo_policy] file=/etc/ nova/policy. yaml openstack- VirtualBox: /opt/stack/ nova$ nova hypervisor-list ------- ------- ------- ------- ----+-- ------- ------- ------+ ------- +------ ---+ ------- ------- ------- ------- ----+-- ------- ------- ------+ ------- +------ ---+ 5149-45dd- ba88-2c4ff9ec9f 12 | openstack- VirtualBox | up | enabled | ------- ------- ------- ------- ----+-- ------- ------- ------+ ------- +------ ---+ openstack- VirtualBox: /opt/stack/ nova$
openstack@
openstack@
policy_
openstack@
+------
| ID | Hypervisor hostname | State | Status |
+------
| 5b3388dc-
+------
openstack@
--format json
openstack@ openstack- VirtualBox: /opt/stack/ nova$ oslopolicy- sample- generator --namespace nova --format json --output-file /etc/nova/ policy. json openstack- VirtualBox: /opt/stack/ nova$ grep policy /etc/nova/ nova.conf[ oslo_policy] file=/etc/ nova/policy. json openstack- VirtualBox: /opt/stack/ nova$ nova hypervisor-list api:os- hypervisors: list to be performed. (HTTP 403) (Request-ID: req-7df8af5d- 5ac8-4827- a5c5-62187807e0 19) openstack- VirtualBox: /opt/stack/ nova$
openstack@
policy_
openstack@
ERROR (Forbidden): Policy doesn't allow os_compute_
openstack@