How to allow users with the member role to upload images as public in an Openstack Cloud?

user_2131621 0
Viewed 658

I've tried changing the /etc/glance/policy.json and setting the following:

"publicize_image": "role:member",

And then restarting both the glance-api and glance-registry services but of course that would be too easy so it doesn't work :)

openstack image create --file gammy_image.iso JACOBS-GAMMY-IMAGE --public
403 Forbidden
You are not authorized to complete publicize_image action.
    (HTTP 403)
openstack roles
2 Answers

I often upload image with command:

glance image-create --name "cirros" --file ./cirros.qcow2 --disk-format qcow2 --container-format bare --visibility public --progress

And it works fine, all users can see my image.

user_91087960

You have two options:

  • add the admin role to your user;
openstack role add --user USER_NAME --project PROJECT_NAME admin
  • remove the need for admin rights for this operation

As an administrator, edit the file /etc/glance/policy.json and change the following line:

"publicize_image": "role:admin", With:

"publicize_image": "", Then restart glance:

$ sudo glance-control all restart
user_75011580
Related