创建instance_tenant_id_requires_admin_privileges
创建实例的时候报如下错误，不知如何解决？控制节点日志没报错：
[root@controller nova]# grep -i 'error' *.log
2015-05-14 11:15:36.428 6103 ERROR nova.scheduler.utils [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] Error from last host: computer1 (node computer1): [u'Traceback (most recent call last):n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2033, in _do_build_and_run_instancen filter_properties)n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2164, in _build_and_run_instancen instance_uuid=instance.uuid, reason=six.text_type(e))n', u"RescheduledException: Build of instance 050b9439-d7f7-4358-999e-fffddce77051 was re-scheduled: Specifying 'tenant_id' other than authenticated tenant in request requires admin privilegesn"]
2015-05-14 11:15:36.433 6103 INFO oslo.messaging._drivers.impl_rabbit [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 ] Connecting to AMQP server on 172.18.7.248:5672
2015-05-14 11:15:36.455 6103 INFO oslo.messaging._drivers.impl_rabbit [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 ] Connected to AMQP server on 172.18.7.248:5672
2015-05-14 11:15:36.487 6103 WARNING nova.scheduler.driver [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] NoValidHost exception with message: 'No valid host was found.'
2015-05-14 11:15:36.488 6103 WARNING nova.scheduler.driver [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] Setting instance to ERROR state.
计算节点日志：
[root@computer1 nova]# grep -i 'error' *.log
nova-compute.log:2015-05-12 02:32:06.064 22928 ERROR nova.network.neutronv2.api [-] [instance: 1ede19de-c103-4d60-8e00-3f783583423b] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 02:32:06.064 22928 TRACE nova.network.neutronv2.api [instance: 1ede19de-c103-4d60-8e00-3f783583423b] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 02:32:06.067 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 02:32:06.067 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 02:32:06.787 22928 ERROR nova.compute.manager [-] [instance: 1ede19de-c103-4d60-8e00-3f783583423b] Instance failed to spawn
nova-compute.log:2015-05-12 02:32:06.787 22928 TRACE nova.compute.manager [instance: 1ede19de-c103-4d60-8e00-3f783583423b] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.447 22928 ERROR nova.network.neutronv2.api [-] [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 04:00:55.447 22928 TRACE nova.network.neutronv2.api [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.451 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 04:00:55.451 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.970 22928 ERROR nova.compute.manager [-] [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] Instance failed to spawn
nova-compute.log:2015-05-12 04:00:55.970 22928 TRACE nova.compute.manager [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:56.917 22928 ERROR nova.network.neutronv2.api [-] [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 04:03:56.917 22928 TRACE nova.network.neutronv2.api [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:56.919 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 04:03:56.919 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:57.675 22928 ERROR nova.compute.manager [-] [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] Instance failed to spawn
keystone的list都是没问题的：
[root@svr248 openstack]# keystone tenant-list
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| e19b357e67294cca8799379086e7bced | admin | True |
| 1c56213482864f7088c707aa9f30d6fd | demo | True |
| b368d26df37746419b232c6dd1b4ef33 | service | True |
+----------------------------------+---------+---------+
[root@svr248 openstack]# keystone user-list
+----------------------------------+---------+---------+-----------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+-----------------+
| 44ccfec300eb4ae1a2aec17766c00037 | admin | True | jjqiu92@163.com |
| 7341eab474ce4da0bc5a06f3e69d50d9 | demo | True | jjqiu92@163.com |
| 030fafb751a64e0c88ff792eed0400b7 | glance | True | |
| b12c3b7f6a794fe7a649dadf1eea977d | neutron | True | |
| 1cc2a11c43474506acac95226d607538 | nova | True | |
+----------------------------------+---------+---------+-----------------+
[root@svr248 openstack]# keystone role-list
+----------------------------------+----------+
| id | name |
+----------------------------------+----------+
| faf84eb40c5a47f68606282c800188db | _member_ |
| 4f765a4ed1414a40a25610602a6b0870 | admin |
+----------------------------------+----------+
[root@svr248 openstack]# keystone user-role-list --tenant admin --user admin
+----------------------------------+----------+----------------------------------+----------------------------------+
| id | name | user_id | tenant_id |
+----------------------------------+----------+----------------------------------+----------------------------------+
| faf84eb40c5a47f68606282c800188db | _member_ | 44ccfec300eb4ae1a2aec17766c00037 | e19b357e67294cca8799379086e7bced |
| 4f765a4ed1414a40a25610602a6b0870 | admin | 44ccfec300eb4ae1a2aec17766c00037 | e19b357e67294cca8799379086e7bced |
+----------------------------------+----------+----------------------------------+----------------------------------+
[root@svr248 openstack]# keystone user-role-list --tenant demo --user demo
+----------------------------------+----------+----------------------------------+----------------------------------+
| id | name | user_id | tenant_id |
+----------------------------------+----------+----------------------------------+----------------------------------+
| faf84eb40c5a47f68606282c800188db | _member_ | 7341eab474ce4da0bc5a06f3e69d50d9 | 1c56213482864f7088c707aa9f30d6fd |
+----------------------------------+----------+----------------------------------+----------------------------------+
[root@controller openstack]# unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2015-05-13T04:28:20Z |
| id | 0de06551137c49209482a223dab82798 |
| tenant_id | e19b357e67294cca8799379086e7bced |
| user_id | 44ccfec300eb4ae1a2aec17766c00037 |
+-----------+----------------------------------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 tenant-list
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| e19b357e67294cca8799379086e7bced | admin | True |
| 1c56213482864f7088c707aa9f30d6fd | demo | True |
| b368d26df37746419b232c6dd1b4ef33 | service | True |
+----------------------------------+---------+---------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 user-list
+----------------------------------+---------+---------+-----------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+-----------------+
| 44ccfec300eb4ae1a2aec17766c00037 | admin | True | jjqiu92@163.com |
| 4df05045ef054f21a16224e8791df606 | cinder | True | |
| 154e2b61c31846f5a4a227153719f496 | demo | True | jjqiu92@163.com |
| 030fafb751a64e0c88ff792eed0400b7 | glance | True | |
| b12c3b7f6a794fe7a649dadf1eea977d | neutron | True | |
| 1cc2a11c43474506acac95226d607538 | nova | True | |
| a99f5b638178488e8619da8452d47ef0 | swift | True | |
+----------------------------------+---------+---------+-----------------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 role-list
+----------------------------------+----------+
| id | name |
+----------------------------------+----------+
| faf84eb40c5a47f68606282c800188db | _member_ |
| 4f765a4ed1414a40a25610602a6b0870 | admin |
+----------------------------------+----------+
[root@controller openstack]# keystone --os-tenant-name demo --os-username demo --os-password DEMO_PASS --os-auth-url http://172.18.7.248:35357/v2.0 token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2015-05-13T04:29:37Z |
| id | 15d351668d3c4e6791b435568085414e |
| tenant_id | 1c56213482864f7088c707aa9f30d6fd |
| user_id | 154e2b61c31846f5a4a227153719f496 |
+-----------+----------------------------------+
[root@controller openstack]# keystone --os-tenant-name demo --os-username demo --os-password DEMO_PASS --os-auth-url http://172.18.7.248:35357/v2.0 user-list
You are not authorized to perform the requested action: admin_required (HTTP 403)
[root@controller openstack]#
[root@controller nova]# grep -i 'error' *.log
2015-05-14 11:15:36.428 6103 ERROR nova.scheduler.utils [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] Error from last host: computer1 (node computer1): [u'Traceback (most recent call last):n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2033, in _do_build_and_run_instancen filter_properties)n', u' File "/usr/lib/python2.7/site-packages/nova/compute/manager.py", line 2164, in _build_and_run_instancen instance_uuid=instance.uuid, reason=six.text_type(e))n', u"RescheduledException: Build of instance 050b9439-d7f7-4358-999e-fffddce77051 was re-scheduled: Specifying 'tenant_id' other than authenticated tenant in request requires admin privilegesn"]
2015-05-14 11:15:36.433 6103 INFO oslo.messaging._drivers.impl_rabbit [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 ] Connecting to AMQP server on 172.18.7.248:5672
2015-05-14 11:15:36.455 6103 INFO oslo.messaging._drivers.impl_rabbit [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 ] Connected to AMQP server on 172.18.7.248:5672
2015-05-14 11:15:36.487 6103 WARNING nova.scheduler.driver [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] NoValidHost exception with message: 'No valid host was found.'
2015-05-14 11:15:36.488 6103 WARNING nova.scheduler.driver [req-ceb13406-3e1a-4607-9a08-a9e056aeacf2 None] [instance: 050b9439-d7f7-4358-999e-fffddce77051] Setting instance to ERROR state.
计算节点日志：
[root@computer1 nova]# grep -i 'error' *.log
nova-compute.log:2015-05-12 02:32:06.064 22928 ERROR nova.network.neutronv2.api [-] [instance: 1ede19de-c103-4d60-8e00-3f783583423b] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 02:32:06.064 22928 TRACE nova.network.neutronv2.api [instance: 1ede19de-c103-4d60-8e00-3f783583423b] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 02:32:06.067 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 02:32:06.067 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 02:32:06.787 22928 ERROR nova.compute.manager [-] [instance: 1ede19de-c103-4d60-8e00-3f783583423b] Instance failed to spawn
nova-compute.log:2015-05-12 02:32:06.787 22928 TRACE nova.compute.manager [instance: 1ede19de-c103-4d60-8e00-3f783583423b] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.447 22928 ERROR nova.network.neutronv2.api [-] [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 04:00:55.447 22928 TRACE nova.network.neutronv2.api [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.451 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 04:00:55.451 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:00:55.970 22928 ERROR nova.compute.manager [-] [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] Instance failed to spawn
nova-compute.log:2015-05-12 04:00:55.970 22928 TRACE nova.compute.manager [instance: 7c730977-c6b5-4f33-9a72-5b68bbce8a9c] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:56.917 22928 ERROR nova.network.neutronv2.api [-] [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] Neutron error creating port on network 4511a0dc-966c-46ec-99e1-418d4a3589b0
nova-compute.log:2015-05-12 04:03:56.917 22928 TRACE nova.network.neutronv2.api [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:56.919 22928 ERROR nova.compute.manager [-] Instance failed network setup after 1 attempt(s)
nova-compute.log:2015-05-12 04:03:56.919 22928 TRACE nova.compute.manager exception_handler_v20(status_code, des_error_body)
nova-compute.log:2015-05-12 04:03:57.675 22928 ERROR nova.compute.manager [-] [instance: 6f23ebde-32fa-4f56-b1d7-71ba24d341de] Instance failed to spawn
keystone的list都是没问题的：
[root@svr248 openstack]# keystone tenant-list
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| e19b357e67294cca8799379086e7bced | admin | True |
| 1c56213482864f7088c707aa9f30d6fd | demo | True |
| b368d26df37746419b232c6dd1b4ef33 | service | True |
+----------------------------------+---------+---------+
[root@svr248 openstack]# keystone user-list
+----------------------------------+---------+---------+-----------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+-----------------+
| 44ccfec300eb4ae1a2aec17766c00037 | admin | True | jjqiu92@163.com |
| 7341eab474ce4da0bc5a06f3e69d50d9 | demo | True | jjqiu92@163.com |
| 030fafb751a64e0c88ff792eed0400b7 | glance | True | |
| b12c3b7f6a794fe7a649dadf1eea977d | neutron | True | |
| 1cc2a11c43474506acac95226d607538 | nova | True | |
+----------------------------------+---------+---------+-----------------+
[root@svr248 openstack]# keystone role-list
+----------------------------------+----------+
| id | name |
+----------------------------------+----------+
| faf84eb40c5a47f68606282c800188db | _member_ |
| 4f765a4ed1414a40a25610602a6b0870 | admin |
+----------------------------------+----------+
[root@svr248 openstack]# keystone user-role-list --tenant admin --user admin
+----------------------------------+----------+----------------------------------+----------------------------------+
| id | name | user_id | tenant_id |
+----------------------------------+----------+----------------------------------+----------------------------------+
| faf84eb40c5a47f68606282c800188db | _member_ | 44ccfec300eb4ae1a2aec17766c00037 | e19b357e67294cca8799379086e7bced |
| 4f765a4ed1414a40a25610602a6b0870 | admin | 44ccfec300eb4ae1a2aec17766c00037 | e19b357e67294cca8799379086e7bced |
+----------------------------------+----------+----------------------------------+----------------------------------+
[root@svr248 openstack]# keystone user-role-list --tenant demo --user demo
+----------------------------------+----------+----------------------------------+----------------------------------+
| id | name | user_id | tenant_id |
+----------------------------------+----------+----------------------------------+----------------------------------+
| faf84eb40c5a47f68606282c800188db | _member_ | 7341eab474ce4da0bc5a06f3e69d50d9 | 1c56213482864f7088c707aa9f30d6fd |
+----------------------------------+----------+----------------------------------+----------------------------------+
[root@controller openstack]# unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2015-05-13T04:28:20Z |
| id | 0de06551137c49209482a223dab82798 |
| tenant_id | e19b357e67294cca8799379086e7bced |
| user_id | 44ccfec300eb4ae1a2aec17766c00037 |
+-----------+----------------------------------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 tenant-list
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| e19b357e67294cca8799379086e7bced | admin | True |
| 1c56213482864f7088c707aa9f30d6fd | demo | True |
| b368d26df37746419b232c6dd1b4ef33 | service | True |
+----------------------------------+---------+---------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 user-list
+----------------------------------+---------+---------+-----------------+
| id | name | enabled | email |
+----------------------------------+---------+---------+-----------------+
| 44ccfec300eb4ae1a2aec17766c00037 | admin | True | jjqiu92@163.com |
| 4df05045ef054f21a16224e8791df606 | cinder | True | |
| 154e2b61c31846f5a4a227153719f496 | demo | True | jjqiu92@163.com |
| 030fafb751a64e0c88ff792eed0400b7 | glance | True | |
| b12c3b7f6a794fe7a649dadf1eea977d | neutron | True | |
| 1cc2a11c43474506acac95226d607538 | nova | True | |
| a99f5b638178488e8619da8452d47ef0 | swift | True | |
+----------------------------------+---------+---------+-----------------+
[root@controller openstack]# keystone --os-tenant-name admin --os-username admin --os-password ADMIN_PASS --os-auth-url http://172.18.7.248:35357/v2.0 role-list
+----------------------------------+----------+
| id | name |
+----------------------------------+----------+
| faf84eb40c5a47f68606282c800188db | _member_ |
| 4f765a4ed1414a40a25610602a6b0870 | admin |
+----------------------------------+----------+
[root@controller openstack]# keystone --os-tenant-name demo --os-username demo --os-password DEMO_PASS --os-auth-url http://172.18.7.248:35357/v2.0 token-get
+-----------+----------------------------------+
| Property | Value |
+-----------+----------------------------------+
| expires | 2015-05-13T04:29:37Z |
| id | 15d351668d3c4e6791b435568085414e |
| tenant_id | 1c56213482864f7088c707aa9f30d6fd |
| user_id | 154e2b61c31846f5a4a227153719f496 |
+-----------+----------------------------------+
[root@controller openstack]# keystone --os-tenant-name demo --os-username demo --os-password DEMO_PASS --os-auth-url http://172.18.7.248:35357/v2.0 user-list
You are not authorized to perform the requested action: admin_required (HTTP 403)
[root@controller openstack]#