When support for multiple remote_ids was added (https://review.openstack.org/#/c/152156/), a prolem was introduced where Keystone will return a 400 response when an identity provider is created without a remote_id. The remote_id is supposed to be optional. Here is what the problem looks like using python-openstackclient:
[root@rdo ~]# openstack --os-auth-url http://rdo.rdodom.test:5000/v3 --os-user-domain-name default \
--os-username admin --os-password password --os-project-domain-name default --os-project-name admin \
--os-identity-api-version 3 identity provider create --enable test
ERROR: openstack 'NoneType' object is not iterable (HTTP 400) (Request-ID: req-172efcf5-6e1b-4059-99f1-44acb069067a)
The problem is that the dict that is passed into IdentityProviderModel.from_dict() looks like this:
{u'enabled': True, u'description': None, u'remote_ids': None}
We pop the 'remote_ids' item from the dict to create remote_ids_list, but this results in the list being None. We then try to iterate the list, which triggers an exception that leads to the 400 error. We need to fix the way we initialize the list.
Fix proposed to branch: master
Review: https:/