Creds files in accr directory return Identity API errors

[Amy Marrich]

On a Master build of devstack attempted to use the admin file from acccr/admin to access OpenStack and received errors in regards to the Identity API version being version 2. The openrc v3 file downloaded from the dashboard worked fine for accessing the CLI. No longer have the devstack instance to pull the exact error. Frickler confirmed in IRC that the accrc files were broken.

[Dr. Jens Harbott (j-harbott)]

O.k., I can reproduce this, but I fail to see why this could have been broken only recently, seems to me the accrc files have been untouched for years. The error looks like:

ubuntu@jh-devstack-01:~/devstack$ . accrc/demo/demo
ubuntu@jh-devstack-01:~/devstack$ openstack token issue
Ignoring domain related config project_domain_id because identity API version is 2.0
Ignoring domain related config user_domain_id because identity API version is 2.0
Ignoring domain related config project_domain_id because identity API version is 2.0
Ignoring domain related config user_domain_id because identity API version is 2.0
Ignoring domain related config project_domain_id because identity API version is 2.0
Ignoring domain related config user_domain_id because identity API version is 2.0
Ignoring domain related config project_domain_id because identity API version is 2.0
Ignoring domain related config user_domain_id because identity API version is 2.0
Expecting to find domain in project. The server could not comply with the request since it is either malformed or otherwise incorrect. The client is assumed to be in error. (HTTP 400) (Request-ID: req-10c54aa9-7024-4834-968d-3756d4831e4f)

Interestingly using python clients like nova or neutron does not trigger the issue. The difference between accrc and the environment generated by ". openrc" looks like this:

ubuntu@jh-devstack-01:~/devstack$ diff bad good
0a1
> OS_AUTH_TYPE=password
2a4
> OS_IDENTITY_API_VERSION=3
5a8,9
> OS_REGION_NAME=RegionOne
> OS_TENANT_NAME=demo
7a12
> OS_VOLUME_API_VERSION=2

where the main issue seems to be setting OS_IDENTITY_API_VERSION. If I add that manually, everything seems to be happy.

We can fix this in devstack, but I'd like to know why/whether this is really necessary, or whether this is a regression in OSC that should be fixed there instead.

[Dr. Jens Harbott (j-harbott)]

Keystone v2 is no longer supported.