It happens with the Charmed OpenStack when projects in other domains have resources, but it's not reproducible with devstack with the following steps.
$ cat local.conf [[local|localrc]] ADMIN_PASSWORD=secret DATABASE_PASSWORD=$ADMIN_PASSWORD RABBIT_PASSWORD=$ADMIN_PASSWORD SERVICE_PASSWORD=$ADMIN_PASSWORD
$ ./stack.sh
$ openstack domain create another_domain
$ openstack project create \ --domain another_domain \ another_project_in_another_domain
$ openstack user create \ --domain another_domain \ --project-domain another_domain \ --project another_project_in_another_domain \ --password secret \ another_user
$ openstack role add \ --user another_user \ --project another_project_in_another_domain \ member
$ openstack server create --image cirros-0.5.2-x86_64-disk \ --flavor m1.tiny test-server-by-another-user
It happens with the Charmed OpenStack when projects in other domains have resources, but it's not reproducible with devstack with the following steps.
$ cat local.conf secret PASSWORD= $ADMIN_ PASSWORD PASSWORD= $ADMIN_ PASSWORD PASSWORD= $ADMIN_ PASSWORD
[[local|localrc]]
ADMIN_PASSWORD=
DATABASE_
RABBIT_
SERVICE_
$ ./stack.sh
$ openstack domain create another_domain
$ openstack project create \ project_ in_another_ domain
--domain another_domain \
another_
$ openstack user create \ domain another_domain \ project_ in_another_ domain \
--domain another_domain \
--project-
--project another_
--password secret \
another_user
$ openstack role add \ project_ in_another_ domain \
--user another_user \
--project another_
member
$ openstack server create --image cirros- 0.5.2-x86_ 64-disk \ by-another- user
--flavor m1.tiny test-server-