EC2 credentials duplicated after a credential updated

Bug #1776221 reported by Yuxin Wang
12
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Expired
Undecided
Unassigned

Bug Description

It's fine when creating a new ec2 credential if there's an existing one with the same blob. It raises 409 conflicts.
But it would allow me to update a credential with the same blob of another one.

Can reproduce this by using REST API and OpenStack Client.

REST API:
PATCH /v3/credentials/{credential_id}

Client:
openstack credential set
[root@test ~]# rpm -qa | grep openstackclient
python-openstackclient-lang-3.14.1-1.el7.noarch
python2-openstackclient-3.14.1-1.el7.noarch

Keystone version: 12.0.0
Token provider: fernet
Credential provider: fernet
MariaDB version10.1.20

Gage Hugo (gagehugo)
description: updated
Revision history for this message
Lance Bragstad (lbragstad) wrote :

Which APIs are you using to recreate this behavior? Are you using the REST APIs directly or are you using one of the clients?

Changed in keystone:
status: New → Incomplete
Revision history for this message
Yuxin Wang (chhyx2008) wrote :

Can reproduce this by using REST API and OpenStack Client.

REST API:
PATCH /v3/credentials/{credential_id}

Client:
[root@test ~]# rpm -qa | grep openstackclient
python-openstackclient-lang-3.14.1-1.el7.noarch
python2-openstackclient-3.14.1-1.el7.noarch

description: updated
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]

Changed in keystone:
status: Incomplete → Expired
Revision history for this message
Colleen Murphy (krinkle) wrote :

Can you give more detail in your example? What is the curl call and the openstackclient invocation you are using? (minus sensitive data)

Changed in keystone:
status: Expired → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for OpenStack Identity (keystone) because there has been no activity for 60 days.]

Changed in keystone:
status: Incomplete → Expired
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.