heat fails with multiple identity endpoints for multiple regions

[Attila Szlovencsák]

root@controller1 (admin) $> pip list |grep -E 'heat|keystone'
heat (5.0.0)
keystone (8.0.1)
keystonemiddleware (2.3.1)
python-heatclient (0.8.0)
python-keystoneclient (1.7.2)

root@controller1 (admin) $> openstack catalog show identity
+-----------+---------------------------------------------+
| Field | Value |
+-----------+---------------------------------------------+
| endpoints | RegionOne |
| | publicURL: http://10.10.10.51:5000/v2.0 |
| | internalURL: http://10.10.10.51:5000/v2.0 |
| | adminURL: http://10.10.10.51:35357/v2.0 |
| | RegionTwo |
| | publicURL: http://2.2.2.2 |
| | internalURL: http://1.1.1.1 |
| | adminURL: http://3.3.3.3 |
| | |
| name | keystone |
| type | identity |
+-----------+---------------------------------------------+

root@controller1 (admin) $> grep for_services /etc/heat/heat.conf
region_name_for_services = RegionOne

root@controller1 (admin) $> env |grep OS_
OS_REGION_NAME=RegionOne
OS_PASSWORD=secret
OS_AUTH_URL=http://10.10.10.51:5000/v2.0
OS_USERNAME=admin
OS_TENANT_NAME=admin

root@controller1 (admin) $> heat stack-create -f test.yaml test
ERROR: Timed out waiting for a reply to message ID 49a60daebdb546c1afde9fbe69ebcb03

/var/log/heat/heat-engine.log
--------------------------------------
2016-05-24 16:58:45.126 11641 DEBUG keystoneclient.auth.identity.v3.base [req-e6d2fabc-9cb5-45ab-bf35-1140c98b7d82 bbddae61b8df4ddea41e5740a64062fd fee9c06890d94e5aa9c667b50d2bd721] Making authentication request to http://10.10.10.51:5000/v3/auth/tokens get_auth_ref /usr/lib/python2.7/site-packages/keystoneclient/auth/identity/v3/base.py:188
2016-05-24 16:58:45.157 11641 DEBUG keystoneclient.session [req-e6d2fabc-9cb5-45ab-bf35-1140c98b7d82 bbddae61b8df4ddea41e5740a64062fd fee9c06890d94e5aa9c667b50d2bd721] REQ: curl -g -i -X GET http://3.3.3.3 -H "Accept: application/json" -H "User-Agent: python-keystoneclient" _http_log_request /usr/lib/python2.7/site-packages/keystoneclient/session.py:198
....
2016-05-24 17:00:52.327 11641 WARNING keystoneclient.auth.identity.base [req-e6d2fabc-9cb5-45ab-bf35-1140c98b7d82 bbddae61b8df4ddea41e5740a64062fd fee9c06890d94e5aa9c667b50d2bd721] Failed to contact the endpoint at http://3.3.3.3 for discovery. Fallback to using that endpoint as the base url.
-----------------------------------------

Heat seems try creating the trust via the adminURL of 'RegionTwo', while 'RegionOne' is used for both the request and the parameter 'region_name_for_services'.