Comment 8 for bug 1875418

Revision history for this message
Ghanshyam Mann (ghanshyammann) wrote :

uploading the result for oslo generated yaml format file works fine and json format file end up with 403 (this bug) .

--format yaml

openstack@openstack-VirtualBox:/opt/stack/nova$ oslopolicy-sample-generator --namespace nova --format yaml --output-file /etc/nova/policy.yaml
openstack@openstack-VirtualBox:/opt/stack/nova$ vi /etc/nova/nova.conf
openstack@openstack-VirtualBox:/opt/stack/nova$ grep policy /etc/nova/nova.conf[oslo_policy]
policy_file=/etc/nova/policy.yaml
openstack@openstack-VirtualBox:/opt/stack/nova$ nova hypervisor-list
+--------------------------------------+----------------------+-------+---------+
| ID | Hypervisor hostname | State | Status |
+--------------------------------------+----------------------+-------+---------+
| 5b3388dc-5149-45dd-ba88-2c4ff9ec9f12 | openstack-VirtualBox | up | enabled |
+--------------------------------------+----------------------+-------+---------+
openstack@openstack-VirtualBox:/opt/stack/nova$

--format json

openstack@openstack-VirtualBox:/opt/stack/nova$ oslopolicy-sample-generator --namespace nova --format json --output-file /etc/nova/policy.json
openstack@openstack-VirtualBox:/opt/stack/nova$ grep policy /etc/nova/nova.conf[oslo_policy]
policy_file=/etc/nova/policy.json
openstack@openstack-VirtualBox:/opt/stack/nova$ nova hypervisor-list
ERROR (Forbidden): Policy doesn't allow os_compute_api:os-hypervisors:list to be performed. (HTTP 403) (Request-ID: req-7df8af5d-5ac8-4827-a5c5-62187807e019)
openstack@openstack-VirtualBox:/opt/stack/nova$