Yes, this issue was only caused by me misinterpreting the default glance config.
** Changed in: glance Status: New => Invalid -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to Glance. https://bugs.launchpad.net/bugs/1675351 Title: glance: creating a public image fails during installation Status in Glance: Invalid Status in openstack-manuals: Invalid Bug description: Following the instructions at https://docs.openstack.org/ocata /install-guide-ubuntu/glance-verify.html I am getting this error when trying to upload the test image: $ openstack image create "cirros2" --file cirros-0.3.5-x86_64-disk.img --disk-format qcow2 --container-format bare --public 403 Forbidden You are not authorized to complete publicize_image action. (HTTP 403) $ Creating the image without the "--public" option works fine. I did verify that I do have the admin role as specified in /etc/glance/policy.json: "publicize_image": "role:admin", $ openstack role assignment list --na +-------+----------------+-------+-----------------+--------+-----------+ | Role | User | Group | Project | Domain | Inherited | +-------+----------------+-------+-----------------+--------+-----------+ | user | demo@Default | | demo@Default | | False | | admin | admin@Default | | admin@Default | | False | | admin | glance@Default | | service@Default | | False | +-------+----------------+-------+-----------------+--------+-----------+ $ To manage notifications about this bug go to: https://bugs.launchpad.net/glance/+bug/1675351/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp