Failure to create load-balancers unless the PROJECT_ID field is provided in credentials

[Adam Dyess]

2024-08-01 14:06:45 WARNING unit.openstack-integrator/1.lb-consumers-relation-departed logger.go:60 Policy does not allow this request to be performed. (HTTP 403) (Request-ID: req-29936264-2399-4fc1-b67d-51b1b08e6e3e)
2024-08-01 14:06:45 ERROR unit.openstack-integrator/1.juju-log server.go:325 lb-consumers:17: Error creating loadbalancer
Traceback (most recent call last):
  File "/var/lib/juju/agents/unit-openstack-integrator-1/charm/lib/charms/layer/openstack.py", line 430, in get_or_create
    lb.create()
  File "/var/lib/juju/agents/unit-openstack-integrator-1/charm/lib/charms/layer/openstack.py", line 514, in create
    lb_info = self._find("load balancers", self._impl.list_loadbalancers())
  File "/var/lib/juju/agents/unit-openstack-integrator-1/charm/lib/charms/layer/openstack.py", line 914, in list_loadbalancers
    return _openstack("loadbalancer", "list")
  File "/var/lib/juju/agents/unit-openstack-integrator-1/charm/lib/charms/layer/openstack.py", line 347, in _openstack
    output = _run_with_creds("openstack", *args, "--format=yaml")
  File "/var/lib/juju/agents/unit-openstack-integrator-1/charm/lib/charms/layer/openstack.py", line 341, in _run_with_creds
    result = subprocess.run(args, env=env, check=True, stdout=subprocess.PIPE)
  File "/usr/lib/python3.10/subprocess.py", line 526, in run
    raise CalledProcessError(retcode, process.args,
subprocess.CalledProcessError: Command '('openstack', 'loadbalancer', 'list', '--format=yaml')' returned non-zero exit status 1.

It was determined that method lib.charms.layer.openstack._run_with_creds(...) is missing OS_PROJECT_ID but when it was available, the load-balancer was created successfully.

[Adam Dyess (addyess)]

Also affects the interface-openstack-integrator as the credentials to O7K are shared over this relation

[Adam Dyess (addyess)]

Waiting for the repo to be unarchived
https://github.com/juju-solutions/interface-openstack-integration

[Adam Dyess (addyess)]

Additions to the provider side
https://github.com/canonical/interface-openstack-integration/pull/16
https://github.com/charmed-kubernetes/charm-openstack-integrator/pull/6

[Adam Dyess (addyess)]

https://bugs.launchpad.net/charm-openstack-cloud-controller/+bug/2075524/comments/3

This didn't go far enough, just adding the project-id to the credentials. using the project-domain-id was also necessary. The following PRs increases credentials shared and used by the integrator charms

https://github.com/canonical/interface-openstack-integration/pull/18
https://github.com/charmed-kubernetes/charm-openstack-integrator/pull/7
https://github.com/charmed-kubernetes/openstack-cloud-controller-operator/pull/2
https://github.com/charmed-kubernetes/charm-kubernetes-control-plane/pull/361