Comment 5 for bug 1653693

>>> There is an issue in novaclient somewhere in session initialization. Fast solution is to pin novaclient<7.0 version, good fix - move OSTF to keystone session instead of user-password auth (and pin novaclient>=7.0 after this)

All I'm saying is that your example works if you pass a project id. That being said, I agree that you should be using session instead.