When bootstrapping a Juju controller against and existing OpenStack cloud if the 'domain-name' field is set in credentials.yaml the bootstrap fails with the following error:
ubuntu@OrangeBox68:~$ juju bootstrap test-stack --bootstrap-series xenial --config external-network=ext-net --config network=int-net --config use-floating-ip=true --metadata-source /home/ubuntu/simplestreams
Creating Juju controller "test-stack-RegionOne" on test-stack/RegionOne
Looking for packaged Juju agent version 2.5-rc1 for amd64
No packaged binary found, preparing local Juju agent binary
Launching controller instance(s) on test-stack/RegionOne...
ERROR failed to bootstrap model: cannot start bootstrap instance: cannot set up groups: failed to create a security group with name: juju-c0f8b1f0-0de4-4b3f-85fc-64abf0c5781a-4776d32b-0d68-446b-86f5-e77c17d0f616
caused by: request (http://172.27.69.80:9696/v2.0/security-groups) returned unexpected status: 400; error info: {"NeutronError": {"message": "Running without keystone AuthN requires that tenant_id is specified", "type": "HTTPBadRequest", "detail": ""}}
This was reproduced in both 2.5-rc1 and latest stable (2.4.7). Setting this field in credentials.yaml to "" results in a successful bootstrap.
This might also tie into https:/ /bugs.launchpad .net/juju/ +bug/1772649 though they're slightly different with one being around autoload- credentials.