|
|
用普通用户创建port时报错：- [ F' K- k" a
HttpException: 403: Client Error for url: http://10.11.53.253:9696/v2.0/ports, (rule:create_port and (rule:create_port:fixed_ips and (rule:create_port:fixed_ips:subnet_id and rule:create_port:fixed_ips:ip_address))) is disallowed by policy: H: p, k* }2 T# y+ Q7 o
, r+ A5 o9 w! j4 u
解决办法，使用admin用户的sh文件 source
3 Z/ u' G6 r) R5 R创建普通用户需要的网卡，加--project 即可：% {/ D( Q4 p5 {* a. n4 _
! d$ A8 y' O4 O0 `& U. U+ o
[root@controller1 ~]# openstack port create --network 852eb9f2-6541-4fe2-b925-1e26972988c0 ' ' --fixed-ip subnet=391ef077-8613-4f90-add3-73598b9b718b,ip-address=10.11.54.45 --project b9dfdbbca47a45d79b604e409429ed88
: J7 m% m3 H h: _' h+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+
# ~& J9 w. [; F+ U| Field | Value |6 L) G; z/ d$ O" `2 W( t" S
+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+
, [, y4 p$ `9 L" x! {0 H| admin_state_up | UP |
% x3 N( @# L! i* v& E# A# `| allowed_address_pairs | |
) M1 g+ a- C; ?' d2 x| binding_host_id | |
6 y, l0 j! k4 k* \! o| binding_profile | |( \( @7 X6 O- b4 l
| binding_vif_details | |
1 O# s7 m2 Z$ R! P1 q" R6 U| binding_vif_type | unbound |' m3 w I9 @& w% u/ T$ L7 D; A
| binding_vnic_type | normal |2 H+ ~; O' z, X% F
| created_at | 2021-12-03T07:31:14Z |8 [& W* }% ^5 ?3 c+ |8 C3 q5 }$ K
| data_plane_status | None |% G& `# I: \# j: n# n, r8 t! m3 S' y
| description | |
6 M+ l# j6 t* ?$ x3 W5 j| device_id | |/ q h9 T" Z( H
| device_owner | |
/ T7 ]& M: r4 O| dns_assignment | None |1 B! i# T* M! e: b2 J
| dns_domain | None |0 ]2 U l$ j# S+ `2 I
| dns_name | None |8 a6 c" M! s: c4 [) E7 b6 r
| extra_dhcp_opts | |" @2 H5 O: o; a3 |3 T4 O0 t! E7 Z
| fixed_ips | ip_address='10.11.54.45', subnet_id='391ef077-8613-4f90-add3-73598b9b718b' |
1 z: ?) V! s* ]* A# x$ H1 h9 h! R| id | 05a711c3-1be2-4dcd-ab02-e8e56dcda224 |
: \7 K X5 P# {' w| ip_allocation | None |! w; B, ]* i; a/ a) \0 q
| location | cloud='', project.domain_id=, project.domain_name=, project.id='b9dfdbbca47a45d79b604e409429ed88', project.name=, region_name='RegionOne', zone= |
, q7 S$ {1 y* }) {. S| mac_address | fa:16:3e:3e:3c:5a |9 }1 N5 k- U" z2 J
| name | |
/ S; d3 @/ D0 H, T+ r| network_id | 852eb9f2-6541-4fe2-b925-1e26972988c0 |
+ y: N9 n/ ?" y2 x) O4 R$ Z| port_security_enabled | True |& I$ G9 |3 T1 w6 N6 I* _
| project_id | b9dfdbbca47a45d79b604e409429ed88 |
) \) E; A0 C- o; r) h) y| propagate_uplink_status | None |
& k% g& S+ g5 b7 o% f| qos_network_policy_id | None |) }! B$ J5 O+ e' f/ ~6 Z+ [
| qos_policy_id | None |5 c) ?" V* K3 B- b6 g3 P+ \' Y
| resource_request | None |
+ s; P1 H0 R" s* l: x _" Y| revision_number | 6 |
$ M7 `* j/ a2 S, R* T2 F| security_group_ids | 99ae289f-b141-4b07-8f64-925edea1c97c |, w3 w1 F0 V" ?0 n" D6 M4 \( X
| status | DOWN |
$ s/ n$ n) z1 Y4 I| tags | |
, L4 _- k) X: M# {| trunk_details | None |
9 ]( j0 }! _ _$ {5 A, D% X6 ?' L| updated_at | 2021-12-03T07:31:14Z |
- t2 D6 o$ \' X+ v1 c0 p+-------------------------+--------------------------------------------------------------------------------------------------------------------------------------------------+, N r8 l5 ~8 i$ B( H; k" A
1 l- c. o& n6 u8 N, d5 o
4 K o8 S- {: a3 y |
|
发表于 2021-12-3 15:33:58