openrc --insecure aliases are broken with venvs

[Logan V]

openrc_insecure: true is broken with some services using venvs, because of the way the openrc is implementing --insecure.

# Convenience Aliases for Self-Signed Certs
alias cinder='cinder --insecure'

However this task does not use the alias,
- name: Add in cinder devices types
  shell: |
    . {{ ansible_env.HOME }}/openrc
    {{ cinder_bin }}/cinder type-create "{{ item.0 }}"
    {{ cinder_bin }}/cinder type-key "{{ item.0 }}" set volume_backend_name="{{ item.1.volume_backend_name }}"

So when using self signed cert on keystone it will always fail:
ERROR: SSL exception connecting to https://int-lb.osdev.corp.lsn:5000/v3/auth/tokens: [Errno 1] _ssl.c:510: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

[Rahul U Nair (rahulunair)]

I could not find this snipped in the project, could you please provide a link to the same. In the project openstack-ansible-os_cinder,
there is a similar code, but it uses the --insecure option which enables keystone to use self signed certs. Please find:
https://github.com/openstack/openstack-ansible-os_cinder/blob/a20041d7da60eedc225d933c10ac572d84da20d0/tasks/cinder_backends.yml#L30

If it is something else, kindly give the link for the same.

[Logan V (loganv)]

Appears to be fixed in master, however liberty is broken: https://github.com/openstack/openstack-ansible/blob/liberty/playbooks/roles/os_cinder/tasks/cinder_backends.yml#L30-L31

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: liberty
Review: https://review.openstack.org/289615

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/289615
Committed: https://git.openstack.org/cgit/openstack/openstack-ansible/commit/?id=d5a388068db0d987d6246bb27d71d999c082d704
Submitter: Jenkins
Branch: liberty

commit d5a388068db0d987d6246bb27d71d999c082d704
Author: Travis Truman <email address hidden>
Date: Mon Mar 7 18:08:14 2016 -0500

    Fix cinder client --insecure call when adding device types

    Change-Id: If56b955ed1234db6a11c0e82a42bb726e4bdfd9a
    Closes-Bug: 1553796

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/openstack-ansible 12.0.8 release.

[Doug Hellmann (doug-hellmann)]

This issue was fixed in the openstack/openstack-ansible 12.0.9 release.

[Davanum Srinivas (DIMS) (dims-v)]

This issue was fixed in the openstack/openstack-ansible 12.0.11 release.

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/openstack-ansible 12.0.8 release.