yahoo-eng-team team mailing list archive

[Matt Riedemann <mriedem.os@xxxxxxxxx>]

I don't know what "Why because tenant_id is project_id now." means here.
The default policy for cloudpipe actions is admin-only, so if you're
trying to do this as a non-admin it's going to fail.

** Changed in: nova
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1693257

Title:
  Policy doesn't allow os_compute_api:os-cloudpipe to be performed

Status in OpenStack Compute (nova):
  Invalid

Bug description:
  OS Version: Ocata
  Ubuntu 16.04
  openstack 3.8.1

  Problem is related to cloudpipe. There are cloudpipe commands in nova and config params in CONF.nova, but we can't be sure if it is still in use and compatible with Ocata.
  There is no clean documentation about what is happening to cloudpipe or which way is better to supply vpn client service. As a side note, there is no proper way for now to use vpnaas since it is unmaintained.

  Here is the full error log:
  https://gist.github.com/kunthar/cdd05c9c61711ea94217e135724cce21

  In short: 
  Forbidden: Policy doesn't allow os_compute_api:os-cloudpipe to be performed. (HTTP 403)
  Why because tenant_id is project_id now.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1693257/+subscriptions