Thanks Robert, According to "/etc/contrail/contrail-keystone-auth.conf" contrail authenticates against keystone as "neutron" user, BUT, checking "keystone user-list", "keystone tenant-list" and "keystone user-role-list", I see no relation between neutron user and tenant admin. Is there any USER/ROLE relationship missing in my config? ThanksJ.
From: [email protected] To: [email protected]; [email protected] Subject: Re: [Users] Flavor not authorized Date: Mon, 2 Nov 2015 13:36:36 +0000 >>SvcMonitorLogFlavor not found default-domain:Ubuntu FW >>SvcMonitorLogflavors name=m1.small not authorized in project admin > anyone has any idea on how to debug this error? > It looks like Contrail has no access to any flavor although they're are all > public flavors.... Hi, Looks like the user has no rights in the specific tenant (admin) where it wants to spawn the instance. Looking at the nova-api.log and keystone.log (set it to debug!) might help in troubleshooting. Cheers, Robert van Leeuwen
_______________________________________________ Users mailing list [email protected] http://lists.opencontrail.org/mailman/listinfo/users_lists.opencontrail.org
