|
|
用普通用户创建port时报错：
2 h I' y8 f" yHttpException: 403: Client Error for url: http://10.11.53.253:9696/v2.0/ports, (rule:create_port and (rule:create_port:fixed_ips and (rule:create_port:fixed_ips:subnet_id and rule:create_port:fixed_ips:ip_address))) is disallowed by policy
1 ~7 O: e! @: k9 | E0 X0 v7 s* H( S: F# c9 b
解决办法，使用admin用户的sh文件 source , U- x6 K( Y1 j# a
创建普通用户需要的网卡，加--project 即可：
' n, w9 R3 @8 Q( i$ Z
# ~$ J$ ~; U; y% P* o y[root@controller1 ~]# openstack port create --network 852eb9f2-6541-4fe2-b925-1e26972988c0 ' ' --fixed-ip subnet=391ef077-8613-4f90-add3-73598b9b718b,ip-address=10.11.54.45 --project b9dfdbbca47a45d79b604e409429ed88
9 t, E- k1 O( K+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+
0 c9 E* c7 `& z3 X s+ Y; R$ E| Field | Value |
. ^& j+ }4 z7 ~6 w+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+& ~3 u' D2 Y' M4 X8 @
| admin_state_up | UP |
# }6 Y- E1 \- F+ W. g5 G| allowed_address_pairs | |% ?) w2 n' {0 M' g4 t
| binding_host_id | |& s: r. O, \* G9 E3 h, f7 @( {) L
| binding_profile | |! H; {5 i; K: M
| binding_vif_details | |$ M: _" [9 z- N, Z. i. R. T$ c
| binding_vif_type | unbound |3 i% o$ }2 e0 B! b; i3 ^
| binding_vnic_type | normal | _# F$ E$ ?7 K# ?# `5 C E% u
| created_at | 2021-12-03T07:31:14Z |
* x& ~1 K" y, f5 L2 K" G2 T# ]9 J- b| data_plane_status | None |1 ^' |( U2 @4 Q/ r: y+ q5 c. F
| description | |
. ?& Y8 V+ \ O1 F3 [# c4 j| device_id | |
# z6 b2 H& F/ m" G5 M0 L| device_owner | |' |( B# z# @# @9 ~2 }. z' K* i
| dns_assignment | None |- \) R2 w6 a7 b4 ~$ d9 p2 c
| dns_domain | None |
. r2 ~$ y3 o, H4 b2 E| dns_name | None |: F# `. A; V/ `, ~. J# |
| extra_dhcp_opts | |2 {. R( C% q7 {4 w# C4 b# C
| fixed_ips | ip_address='10.11.54.45', subnet_id='391ef077-8613-4f90-add3-73598b9b718b' |
4 j! ^3 \+ X3 |# ~- z| id | 05a711c3-1be2-4dcd-ab02-e8e56dcda224 |
/ H! R6 ^9 ]( g$ O {* i7 j8 s0 @| ip_allocation | None |7 u9 g( f- ]5 s( R8 e9 D4 [/ [$ v
| location | cloud='', project.domain_id=, project.domain_name=, project.id='b9dfdbbca47a45d79b604e409429ed88', project.name=, region_name='RegionOne', zone= |* R$ h8 y7 E2 T1 {
| mac_address | fa:16:3e:3e:3c:5a |
" C! H; h- G, {! V }8 \$ y8 Z% m| name | |
3 e: O" j/ J. C( N| network_id | 852eb9f2-6541-4fe2-b925-1e26972988c0 |
* Z% \3 ?1 I& V| port_security_enabled | True |( w+ r- f" c& x3 f
| project_id | b9dfdbbca47a45d79b604e409429ed88 |7 ?; X* |! [; l% M% s& O
| propagate_uplink_status | None |
7 w' h, w6 _. s" x3 ?| qos_network_policy_id | None |4 w& v8 l- O0 |. P
| qos_policy_id | None |
( H e7 i4 t5 P| resource_request | None |
% q& j) j4 F1 _3 }! L2 Z* b| revision_number | 6 |( D3 G/ i! ~3 [6 {
| security_group_ids | 99ae289f-b141-4b07-8f64-925edea1c97c |) T( Z! S$ p: l+ Z) a3 G2 G# V
| status | DOWN |3 g+ @/ G- y7 I: f# [! s1 T9 t
| tags | |
5 Z3 e3 t+ L2 O4 Q4 z6 ~: g| trunk_details | None |+ |' E( s1 k- S# x8 d. V2 e F0 R
| updated_at | 2021-12-03T07:31:14Z |
) P+ n; `$ ^2 H& j3 _& h+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+
! ?% v# R0 L4 E& m5 t) b9 c( W
9 x, ^$ E9 U# V( s. j! c9 s( w2 ]* f) q8 Y- T }$ |* l
|
|
发表于 2021-12-3 15:33:58