Comment 5 for bug 956876

Packaging makes new installs do chmod /var/lib/nova nova:nova properly.
And looking at your description /var/lib/nova is owned by nova...

Looks like buckets, images, instances, keys and networks were created while running as root, which means nova was running as root when it created them. Could that be the result of some test ? Can you reproduce it ?