yahoo-eng-team team mailing list archive

Thread
Date
[Bug 1742584] Re: nova reset-state does not work : Reset state for server "" failed: Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be performed

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Launchpad Bug Tracker <1742584@xxxxxxxxxxxxxxxxxx>
Date: Sat, 19 May 2018 04:17:20 -0000
Reply-to: Bug 1742584 <1742584@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx
[Expired for python-novaclient because there has been no activity for 60
days.]

** Changed in: python-novaclient
       Status: Incomplete => Expired

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1742584

Title:
  nova reset-state does not work : Reset state for server "" failed:
  Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be
  performed

Status in OpenStack Compute (nova):
  Expired
Status in python-novaclient:
  Expired

Bug description:
  According to openstack admin guide document, server reset stat should
  but it fails to reset.

  nova reset-state --active vmname or id

  Error throws like

  Reset state for server "vmname" failed: Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be performed. (HTTP 403) (Request-ID: req-c8ee6de5-fa79-410b-91e1-9d3241415353)
  ERROR (CommandError): Unable to reset the state for the specified server(s).

  
  Dubug details:

  [root@controller-newton nova]# nova reset-state --active QA_Hyb_Config01
  Reset state for server QA_Hyb_Config01 failed: Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be performed. (HTTP 403) (Request-ID: req-af1e7d59-87ba-4ee3-a048-6ed5de252c02)
  ERROR (CommandError): Unable to reset the state for the specified server(s).
  [root@controller-newton nova]# nova --debug --os-tenant-name hybrid --os-username hybrid reset-state QA_Hyb_Config01
  DEBUG (extension:157) found extension EntryPoint.parse('v2token = keystoneauth1.loading._plugins.identity.v2:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oauth1 = keystoneauth1.extras.oauth1._loading:V3OAuth1')
  DEBUG (extension:157) found extension EntryPoint.parse('admin_token = keystoneauth1.loading._plugins.admin_token:AdminToken')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcauthcode = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectAuthorizationCode')
  DEBUG (extension:157) found extension EntryPoint.parse('v2password = keystoneauth1.loading._plugins.identity.v2:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3samlpassword = keystoneauth1.extras._saml2._loading:Saml2Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3password = keystoneauth1.loading._plugins.identity.v3:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcaccesstoken = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectAccessToken')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcpassword = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectPassword')
  DEBUG (extension:157) found extension EntryPoint.parse('v3kerberos = keystoneauth1.extras.kerberos._loading:Kerberos')
  DEBUG (extension:157) found extension EntryPoint.parse('token = keystoneauth1.loading._plugins.identity.generic:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcclientcredentials = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectClientCredentials')
  DEBUG (extension:157) found extension EntryPoint.parse('v3tokenlessauth = keystoneauth1.loading._plugins.identity.v3:TokenlessAuth')
  DEBUG (extension:157) found extension EntryPoint.parse('v3token = keystoneauth1.loading._plugins.identity.v3:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3totp = keystoneauth1.loading._plugins.identity.v3:TOTP')
  DEBUG (extension:157) found extension EntryPoint.parse('password = keystoneauth1.loading._plugins.identity.generic:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3fedkerb = keystoneauth1.extras.kerberos._loading:MappedKerberos')
  DEBUG (extension:157) found extension EntryPoint.parse('token_endpoint = openstackclient.api.auth_plugin:TokenEndpoint')
  DEBUG (session:337) REQ: curl -g -i -X GET http://192.168.84.11:35357/v3 -H "Accept: application/json" -H "User-Agent: nova keystoneauth1/2.12.2 python-requests/2.11.1 CPython/2.7.5"
  INFO (connectionpool:214) Starting new HTTP connection (1): 192.168.84.11
  DEBUG (connectionpool:401) "GET /v3 HTTP/1.1" 200 253
  DEBUG (session:366) RESP: [200] Date: Thu, 11 Jan 2018 00:36:29 GMT Server: Apache/2.4.6 (CentOS) mod_wsgi/3.4 Python/2.7.5 Vary: X-Auth-Token x-openstack-request-id: req-1905db04-30fc-43fa-a27f-b790a6091721 Content-Length: 253 Keep-Alive: timeout=5, max=100 Connection: Keep-Alive Content-Type: application/json
  RESP BODY: {"version": {"status": "stable", "updated": "2016-10-06T00:00:00Z", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.identity-v3+json"}], "id": "v3.7", "links": [{"href": "http://192.168.84.11:35357/v3/";, "rel": "self"}]}}

  DEBUG (base:165) Making authentication request to http://192.168.84.11:35357/v3/auth/tokens
  DEBUG (connectionpool:401) "POST /v3/auth/tokens HTTP/1.1" 201 2849
  DEBUG (base:170) {"token": {"is_domain": false, "methods": ["password"], "roles": [{"id": "f475d79c611b44a38c814710bd40400b", "name": "user"}], "expires_at": "2018-01-11T01:36:29.000000Z", "project": {"domain": {"id": "default", "name": "Default"}, "id": "f637dd46295847c98f4d3fe476d2a3ca", "name": "hybrid"}, "catalog": [{"endpoints": [{"url": "http://192.168.84.11:9696";, "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "8404704c43084a2dacf5557888294d9a"}, {"url": "http://192.168.79.69:9696";, "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "8a3904b4c2fe4a9293e810a94cc6da8e"}, {"url": "http://192.168.79.69:9696";, "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "ea075320c5424f40b9745754154c96b7"}], "type": "network", "id": "191030293fa0403a9627be0c817a9854", "name": "neutron"}, {"endpoints": [{"url": "http://192.168.84.11:5000/v3/";, "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "0a7f48f223da481280e5a3f27ff118e4"}, {"url": "http://192.168.79.69:35357/v3/";, "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "56a113e8a40d4cfb852d3bcbc36eb0f1"}, {"url": "http://192.168.79.69:35357/v3/";, "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "c3f9a34b692042d8a95f4c76aa4d2521"}], "type": "identity", "id": "2c9d6d29b3f44a89bf90e2bb34e6b9e0", "name": "keystone"}, {"endpoints": [{"url": "http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca";, "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "08d29f5f24324f6493fff1fcec2e5ed4"}, {"url": "http://192.168.79.69:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca";, "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "40d2a26f029649b6991da0e59569ce64"}, {"url": "http://192.168.79.69:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca";, "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "6cdf3603450c490a85eccd4ff1d1f7e6"}], "type": "compute", "id": "5d06cf70a48b420f87c8c373276b520a", "name": "nova"}, {"endpoints": [{"url": "http://192.168.79.69:9292";, "interface": "internal", "region": "RegionOne", "region_id": "RegionOne", "id": "8d5e3d4a2fa24beab91cd1bd358b2a95"}, {"url": "http://192.168.84.11:9292";, "interface": "public", "region": "RegionOne", "region_id": "RegionOne", "id": "ab46de6ab00744059d809bb2892a7f02"}, {"url": "http://192.168.79.69:9292";, "interface": "admin", "region": "RegionOne", "region_id": "RegionOne", "id": "bc770b5e2d7941d098caf791196eef88"}], "type": "image", "id": "6d22ad22c55949e7bb4873a1aa055eda", "name": "glance"}], "user": {"domain": {"id": "default", "name": "Default"}, "id": "9bf3a11adeb646c184509452bd8ee214", "name": "hybrid"}, "audit_ids": ["FiPzrQAiTSqe6V8vhLWN2Q"], "issued_at": "2018-01-11T00:36:29.000000Z"}}
  REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  DEBUG (session:337) REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  INFO (connectionpool:214) Starting new HTTP connection (1): 192.168.84.11
  DEBUG (connectionpool:401) "GET /v2.1/f637dd46295847c98f4d3fe476d2a3ca HTTP/1.1" 404 112
  RESP: [404] Content-Length: 112 Content-Type: application/json; charset=UTF-8 X-Compute-Request-Id: req-bc126834-6b24-4b07-9ab9-968b5a2d7529 Date: Thu, 11 Jan 2018 00:36:29 GMT Connection: keep-alive
  RESP BODY: {"message": "The resource could not be found.<br /><br />\n\n\n", "code": "404 Not Found", "title": "Not Found"}

  DEBUG (session:366) RESP: [404] Content-Length: 112 Content-Type: application/json; charset=UTF-8 X-Compute-Request-Id: req-bc126834-6b24-4b07-9ab9-968b5a2d7529 Date: Thu, 11 Jan 2018 00:36:29 GMT Connection: keep-alive
  RESP BODY: {"message": "The resource could not be found.<br /><br />\n\n\n", "code": "404 Not Found", "title": "Not Found"}

  GET call to compute for http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca used request id req-bc126834-6b24-4b07-9ab9-968b5a2d7529
  DEBUG (client:85) GET call to compute for http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca used request id req-bc126834-6b24-4b07-9ab9-968b5a2d7529
  REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/ -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  DEBUG (session:337) REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/ -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  DEBUG (connectionpool:401) "GET /v2.1/ HTTP/1.1" 200 387
  RESP: [200] Content-Length: 387 Content-Type: application/json Openstack-Api-Version: compute 2.1 X-Openstack-Nova-Api-Version: 2.1 Vary: OpenStack-API-Version, X-OpenStack-Nova-API-Version X-Compute-Request-Id: req-069df01a-f567-4677-9c09-93d0fbf47cfc Date: Thu, 11 Jan 2018 00:36:29 GMT Connection: keep-alive
  RESP BODY: {"version": {"status": "CURRENT", "updated": "2013-07-23T11:33:21Z", "links": [{"href": "http://192.168.84.11:8774/v2.1/";, "rel": "self"}, {"href": "http://docs.openstack.org/";, "type": "text/html", "rel": "describedby"}], "min_version": "2.1", "version": "2.38", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.compute+json;version=2.1"}], "id": "v2.1"}}

  DEBUG (session:366) RESP: [200] Content-Length: 387 Content-Type: application/json Openstack-Api-Version: compute 2.1 X-Openstack-Nova-Api-Version: 2.1 Vary: OpenStack-API-Version, X-OpenStack-Nova-API-Version X-Compute-Request-Id: req-069df01a-f567-4677-9c09-93d0fbf47cfc Date: Thu, 11 Jan 2018 00:36:29 GMT Connection: keep-alive
  RESP BODY: {"version": {"status": "CURRENT", "updated": "2013-07-23T11:33:21Z", "links": [{"href": "http://192.168.84.11:8774/v2.1/";, "rel": "self"}, {"href": "http://docs.openstack.org/";, "type": "text/html", "rel": "describedby"}], "min_version": "2.1", "version": "2.38", "media-types": [{"base": "application/json", "type": "application/vnd.openstack.compute+json;version=2.1"}], "id": "v2.1"}}

  GET call to compute for http://192.168.84.11:8774/v2.1/ used request id req-069df01a-f567-4677-9c09-93d0fbf47cfc
  DEBUG (client:85) GET call to compute for http://192.168.84.11:8774/v2.1/ used request id req-069df01a-f567-4677-9c09-93d0fbf47cfc
  DEBUG (extension:157) found extension EntryPoint.parse('v2token = keystoneauth1.loading._plugins.identity.v2:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oauth1 = keystoneauth1.extras.oauth1._loading:V3OAuth1')
  DEBUG (extension:157) found extension EntryPoint.parse('admin_token = keystoneauth1.loading._plugins.admin_token:AdminToken')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcauthcode = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectAuthorizationCode')
  DEBUG (extension:157) found extension EntryPoint.parse('v2password = keystoneauth1.loading._plugins.identity.v2:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3samlpassword = keystoneauth1.extras._saml2._loading:Saml2Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3password = keystoneauth1.loading._plugins.identity.v3:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcaccesstoken = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectAccessToken')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcpassword = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectPassword')
  DEBUG (extension:157) found extension EntryPoint.parse('v3kerberos = keystoneauth1.extras.kerberos._loading:Kerberos')
  DEBUG (extension:157) found extension EntryPoint.parse('token = keystoneauth1.loading._plugins.identity.generic:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3oidcclientcredentials = keystoneauth1.loading._plugins.identity.v3:OpenIDConnectClientCredentials')
  DEBUG (extension:157) found extension EntryPoint.parse('v3tokenlessauth = keystoneauth1.loading._plugins.identity.v3:TokenlessAuth')
  DEBUG (extension:157) found extension EntryPoint.parse('v3token = keystoneauth1.loading._plugins.identity.v3:Token')
  DEBUG (extension:157) found extension EntryPoint.parse('v3totp = keystoneauth1.loading._plugins.identity.v3:TOTP')
  DEBUG (extension:157) found extension EntryPoint.parse('password = keystoneauth1.loading._plugins.identity.generic:Password')
  DEBUG (extension:157) found extension EntryPoint.parse('v3fedkerb = keystoneauth1.extras.kerberos._loading:MappedKerberos')
  DEBUG (extension:157) found extension EntryPoint.parse('token_endpoint = openstackclient.api.auth_plugin:TokenEndpoint')
  DEBUG (session:337) REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers?name=QA_Hyb_Config01 -H "OpenStack-API-Version: compute 2.37" -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-OpenStack-Nova-API-Version: 2.37" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  DEBUG (connectionpool:401) "GET /v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers?name=QA_Hyb_Config01 HTTP/1.1" 200 372
  DEBUG (session:366) RESP: [200] Content-Length: 372 Content-Type: application/json Openstack-Api-Version: compute 2.37 X-Openstack-Nova-Api-Version: 2.37 Vary: OpenStack-API-Version, X-OpenStack-Nova-API-Version X-Compute-Request-Id: req-fb43548a-4e17-45be-b053-a5dc4cadca78 Date: Thu, 11 Jan 2018 00:36:30 GMT Connection: keep-alive
  RESP BODY: {"servers": [{"id": "e8fe1887-0f5d-4dc1-941f-1c61bcde8224", "links": [{"href": "http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224";, "rel": "self"}, {"href": "http://192.168.84.11:8774/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224";, "rel": "bookmark"}], "name": "QA_Hyb_Config01"}]}

  DEBUG (client:85) GET call to compute for http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers?name=QA_Hyb_Config01 used request id req-fb43548a-4e17-45be-b053-a5dc4cadca78
  DEBUG (session:337) REQ: curl -g -i -X GET http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224 -H "OpenStack-API-Version: compute 2.37" -H "User-Agent: python-novaclient" -H "Accept: application/json" -H "X-OpenStack-Nova-API-Version: 2.37" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b"
  DEBUG (connectionpool:401) "GET /v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224 HTTP/1.1" 200 1887
  DEBUG (session:366) RESP: [200] Content-Length: 1887 Content-Type: application/json Openstack-Api-Version: compute 2.37 X-Openstack-Nova-Api-Version: 2.37 Vary: OpenStack-API-Version, X-OpenStack-Nova-API-Version X-Compute-Request-Id: req-159a1f3c-680e-474d-a68b-c7ff0117d216 Date: Thu, 11 Jan 2018 00:36:30 GMT Connection: keep-alive
  RESP BODY: {"server": {"OS-EXT-STS:task_state": null, "addresses": {"Hybrid-Private": [{"OS-EXT-IPS-MAC:mac_addr": "fa:16:3e:f5:90:95", "version": 4, "addr": "172.16.38.149", "OS-EXT-IPS:type": "fixed"}, {"OS-EXT-IPS-MAC:mac_addr": "fa:16:3e:f5:90:95", "version": 4, "addr": "192.168.85.39", "OS-EXT-IPS:type": "floating"}]}, "links": [{"href": "http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224";, "rel": "self"}, {"href": "http://192.168.84.11:8774/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224";, "rel": "bookmark"}], "image": {"id": "3ae7c988-0fdb-4437-a9eb-35005c6912fe", "links": [{"href": "http://192.168.84.11:8774/f637dd46295847c98f4d3fe476d2a3ca/images/3ae7c988-0fdb-4437-a9eb-35005c6912fe";, "rel": "bookmark"}]}, "OS-EXT-STS:vm_state": "error", "OS-SRV-USG:launched_at": "2017-10-24T07:35:42.000000", "flavor": {"id": "7f3ed319-6e17-4c03-ac42-f19bd43d98e8", "links": [{"href": "http://192.168.84.11:8774/f637dd46295847c98f4d3fe476d2a3ca/flavors/7f3ed319-6e17-4c03-ac42-f19bd43d98e8";, "rel": "bookmark"}]}, "id": "e8fe1887-0f5d-4dc1-941f-1c61bcde8224", "security_groups": [{"name": "default"}], "OS-SRV-USG:terminated_at": null, "user_id": "9bf3a11adeb646c184509452bd8ee214", "OS-DCF:diskConfig": "AUTO", "accessIPv4": "", "accessIPv6": "", "OS-EXT-STS:power_state": 4, "OS-EXT-AZ:availability_zone": "COMPUTE-3", "metadata": {}, "status": "ERROR", "updated": "2018-01-10T23:42:28Z", "hostId": "23e6c8cb0ee480417ae654222a8bb0527970611cc8ca140fedf8103e", "description": "QA_Hyb_Config01", "tags": [], "key_name": null, "locked": false, "name": "QA_Hyb_Config01", "created": "2017-10-24T07:27:02Z", "tenant_id": "f637dd46295847c98f4d3fe476d2a3ca", "os-extended-volumes:volumes_attached": [], "fault": {"message": "Not authorized.", "code": 401, "created": "2018-01-10T20:33:39Z"}, "config_drive": ""}}

  DEBUG (client:85) GET call to compute for http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224 used request id req-159a1f3c-680e-474d-a68b-c7ff0117d216
  DEBUG (session:337) REQ: curl -g -i -X POST http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224/action -H "Accept: application/json" -H "User-Agent: python-novaclient" -H "OpenStack-API-Version: compute 2.37" -H "X-OpenStack-Nova-API-Version: 2.37" -H "X-Auth-Token: {SHA1}3b1df4c70cc74738cfb00a58f931fbc6f175ae2b" -H "Content-Type: application/json" -d '{"os-resetState": {"state": "error"}}'
  DEBUG (connectionpool:401) "POST /v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224/action HTTP/1.1" 403 124
  DEBUG (session:366) RESP: [403] Openstack-Api-Version: compute 2.37 X-Openstack-Nova-Api-Version: 2.37 Vary: OpenStack-API-Version, X-OpenStack-Nova-API-Version Content-Type: application/json; charset=UTF-8 Content-Length: 124 X-Compute-Request-Id: req-1f481386-4a61-447e-a041-93a85e764c1e Date: Thu, 11 Jan 2018 00:36:30 GMT Connection: keep-alive
  RESP BODY: {"forbidden": {"message": "Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be performed.", "code": 403}}

  DEBUG (client:85) POST call to compute for http://192.168.84.11:8774/v2.1/f637dd46295847c98f4d3fe476d2a3ca/servers/e8fe1887-0f5d-4dc1-941f-1c61bcde8224/action used request id req-1f481386-4a61-447e-a041-93a85e764c1e
  Reset state for server QA_Hyb_Config01 failed: Policy doesn't allow os_compute_api:os-admin-actions:reset_state to be performed. (HTTP 403) (Request-ID: req-1f481386-4a61-447e-a041-93a85e764c1e)
  DEBUG (shell:984) Unable to reset the state for the specified server(s).
  Traceback (most recent call last):
    File "/usr/lib/python2.7/site-packages/novaclient/shell.py", line 982, in main
      OpenStackComputeShell().main(argv)
    File "/usr/lib/python2.7/site-packages/novaclient/shell.py", line 909, in main
      args.func(self.cs, args)
    File "/usr/lib/python2.7/site-packages/novaclient/v2/shell.py", line 3998, in do_reset_state
      raise exceptions.CommandError(msg)
  CommandError: Unable to reset the state for the specified server(s).
  ERROR (CommandError): Unable to reset the state for the specified server(s).

  
  After changing the json policy, same issue persists

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1742584/+subscriptions