RAX provider does not support api-key based auth

Bug #1617394 reported by Jose L. VG on 2016-08-26
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
juju
High
Unassigned

Bug Description

When using juju 2's rackspace cloud provider if you set access-key auth like this

credentials:
  rackspace:
    rax-creds:
      auth-type: access-key
      access-key: {username}
      secret-key: {apikey}
      tenant-name: "{tenant number}"

It won't work, you'll get:
"ERROR authentication failed.
..."

Instead you are forced to use the userpass auth-type and expose your website account password:

credentials:
  rackspace:
    rax-creds:
      auth-type: userpass
      password: {rack website account password}
      tenant-name: "{tenant number}"
      username: {username}

One would expect the default auth-type access-key to work, specially being more secure, as it uses the apikey, not the account password directly.

Changed in juju:
status: New → Triaged
importance: Undecided → High
assignee: nobody → Alexis Bruemmer (alexis-bruemmer)
milestone: none → 2.0-beta18
Curtis Hovey (sinzui) on 2016-09-09
Changed in juju:
milestone: 2.0-beta18 → 2.0-beta19
Changed in juju:
milestone: 2.0-beta19 → 2.0-rc1
Changed in juju:
milestone: 2.0-rc1 → 2.0-rc2
Changed in juju:
assignee: Alexis Bruemmer (alexis-bruemmer) → Richard Harding (rharding)
Nate Finch (natefinch) wrote :

Rackspace expects the name of the key to be "apiKey" and openstack is sending "access-key" which is the problem, I think.

Changed in juju:
assignee: Richard Harding (rharding) → Nate Finch (natefinch)
status: Triaged → In Progress
Richard Harding (rharding) wrote :

We need to fully support the api-key method of auth and don't currently. Since much of the Rackspacee provider was copied from the OpenStack provider the access/secret-key auth doesn't apply.

We'll update to support api-key in a future release.

summary: - RAX provider access-key auth-type does not work
+ RAX provider does not support api-key based auth
Changed in juju:
milestone: 2.0-rc2 → 2.1.0
Nate Finch (natefinch) wrote :

Rackspace has its own "username + apiKey" authentication that is different and special, and does not support openstack's access-key style authentication. See here: https://developer.rackspace.com/docs/cloud-identity/v2/general-api-info/authentication-info/sample-auth-req-response/#sample-request

For now we have disabled access-key as an authentication method, and we'll add support for the apiKey later.

Changed in juju:
status: In Progress → Triaged
assignee: Nate Finch (natefinch) → Richard Harding (rharding)
Changed in juju:
assignee: Richard Harding (rharding) → nobody
Anastasia (anastasia-macmood) wrote :

Removing 2.1 milestone as we will not be addressing this issue in 2.1.

Changed in juju:
milestone: 2.1.0 → none
To post a comment you must log in.
This report contains Public information  Edit
Everyone can see this information.

Other bug subscribers