|
|
用普通用户创建port时报错:
5 r6 t" y; r# D$ AHttpException: 403: Client Error for url: http://10.11.53.253:9696/v2.0/ports, (rule:create_port and (rule:create_port:fixed_ips and (rule:create_port:fixed_ips:subnet_id and rule:create_port:fixed_ips:ip_address))) is disallowed by policy
3 U+ k z4 o7 U8 b- I0 M0 j$ J& o" @: F, n
解决办法,使用admin用户的sh文件 source : Q; K* |- N y: ]$ w
创建普通用户需要的网卡,加--project 即可:/ b% U# J' A, v+ R' l8 r: u; F0 U
, E/ U ^! G8 t# M" t) E
[root@controller1 ~]# openstack port create --network 852eb9f2-6541-4fe2-b925-1e26972988c0 ' ' --fixed-ip subnet=391ef077-8613-4f90-add3-73598b9b718b,ip-address=10.11.54.45 --project b9dfdbbca47a45d79b604e409429ed88 9 K& u- j8 h! ]4 m" m) D5 L
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+
2 d+ `! S: x& r| Field | Value |
& J4 e5 n: N# T+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+$ e) m/ J4 Z6 u# l6 r4 N
| admin_state_up | UP |
4 Q) f; n) R, ^( M* J& t| allowed_address_pairs | |
6 q+ J5 b% o9 d8 M" \| binding_host_id | |
) h" D: L- j. H6 c& ~# d| binding_profile | |
; W3 X+ g3 E. w9 U! k" t| binding_vif_details | |
" p5 B* i1 m% d0 e# n| binding_vif_type | unbound |- K* E2 |1 X V
| binding_vnic_type | normal |
0 [; U- T, I$ n0 t* P| created_at | 2021-12-03T07:31:14Z |
. j) P# H: ]5 [. X1 p' x| data_plane_status | None |
# ^7 _1 Y8 [" [; d* H( z1 o, C7 X| description | |$ f" ~' s% f; v% t0 _
| device_id | |$ l7 `: z' z& [- m
| device_owner | |
7 x1 o+ l) `1 f6 `' i- V| dns_assignment | None |
/ M! g; Y5 _; N0 @| dns_domain | None |" W! W" V7 q6 A; L: a
| dns_name | None |! z) L9 y9 t1 d& l6 r( K' V
| extra_dhcp_opts | |
G$ ]5 c' w# H: m2 E2 ~| fixed_ips | ip_address='10.11.54.45', subnet_id='391ef077-8613-4f90-add3-73598b9b718b' |
. z# a3 A: d2 Z8 b- w9 h0 H4 v+ f| id | 05a711c3-1be2-4dcd-ab02-e8e56dcda224 |
4 O7 N1 t3 _% E3 @+ @| ip_allocation | None |
: s3 J4 A% a) V, S| location | cloud='', project.domain_id=, project.domain_name=, project.id='b9dfdbbca47a45d79b604e409429ed88', project.name=, region_name='RegionOne', zone= |
7 O+ ^" F3 l. b) Y1 b- B| mac_address | fa:16:3e:3e:3c:5a |
( @' Y, m0 i9 Z0 y# |1 || name | |* b! @- a! ~- I
| network_id | 852eb9f2-6541-4fe2-b925-1e26972988c0 |
$ w4 r8 H6 e: Y) e" s| port_security_enabled | True |$ Z y3 A- T, u2 T; p( \
| project_id | b9dfdbbca47a45d79b604e409429ed88 |
d: R5 `( g; D! e| propagate_uplink_status | None | S6 q9 D$ j' M
| qos_network_policy_id | None |* v6 m7 v2 z9 F- B* Y/ N. Y4 ~
| qos_policy_id | None |
% u7 @# d# |8 W| resource_request | None |
- ~# q t4 O/ z- w/ u| revision_number | 6 |
( V( h. g# u. Q; }| security_group_ids | 99ae289f-b141-4b07-8f64-925edea1c97c |" s( {& W/ Y% H* o, W
| status | DOWN |
: [7 W, k. O0 ~: G- V6 G+ b| tags | |9 y! M, f2 w/ D/ U* Y& W
| trunk_details | None |8 v/ \2 D! j( W4 _/ d
| updated_at | 2021-12-03T07:31:14Z |( ?$ }2 z; x8 j( b" o: Q
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+( Y, n+ C# b/ E% ~) b" p
3 U: M* E- `7 C8 i! O9 B4 ^# T
4 j) j3 S1 C, |3 `1 D. T |
|