Skip to content

Issue with non-admin creds and port security flag #594

@jovial

Description

@jovial

Similar to this:

│ Error: Error creating openstack_networking_port_v2: Request forbidden: [POST https://network.os-api.example.org/v2.0/ports], error message: {"NeutronError": {"type": "PolicyNotAuthorized", "message": "((rule:create_port and rule:create_port:binding:vnic_type) and rule:create_port:port_security_enabled) is disallowed by policy", "detail": ""}}
│ 
│   with openstack_networking_port_v2.sriov_lln[1],
│   on main.tf line 52, in resource "openstack_networking_port_v2" "sriov_lln":
│   52: resource "openstack_networking_port_v2" "sriov_lln" {
│ 
╵
╷
│ Error: Error creating openstack_networking_port_v2: Request forbidden: [POST https://network.os-api.example.org/v2.0/ports], error message: {"NeutronError": {"type": "PolicyNotAuthorized", "message": "((rule:create_port and rule:create_port:binding:vnic_type) and rule:create_port:port_security_enabled) is disallowed by policy", "detail": ""}}
│ 
│   with openstack_networking_port_v2.sriov_lln[2],
│   on main.tf line 52, in resource "openstack_networking_port_v2" "sriov_lln":
│   52: resource "openstack_networking_port_v2" "sriov_lln" {
│ 
╵
╷
│ Error: Error creating openstack_networking_port_v2: Request forbidden: [POST https://network.os-api.example.org/v2.0/ports], error message: {"NeutronError": {"type": "PolicyNotAuthorized", "message": "((rule:create_port and rule:create_port:binding:vnic_type) and rule:create_port:port_security_enabled) is disallowed by policy", "detail": ""}}
│ 
│   with openstack_networking_port_v2.sriov_lln[0],
│   on main.tf line 52, in resource "openstack_networking_port_v2" "sriov_lln":
│   52: resource "openstack_networking_port_v2" "sriov_lln" {
│ 

Sorry, I only tested with admin rights before. I guess we need to leave the option unset unless explicitly disabled.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions