Incorrect openstack credential tenant name

Bug #1785747 reported by Ian Booth
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Canonical Juju
Fix Released
High
Vinodhini

Bug Description

Juju incorrectly enforces that the tenant name credential attribute for openstack clouds is mandatory. And it uses the underlying goose cred parsing to incorrectly set tenant id to tenant name, see https://github.com/go-goose/goose/issues/67

The assumption that tenant name is mandatory is used when printing errors etc. So some rework is required to make this optional, after the goose fix lands. See various methods in github.com/juju/juju/provider/openstack/credentials.go

Ian Booth (wallyworld)
Changed in juju:
assignee: nobody → Vinodhini (vinu-b)
Revision history for this message
Heather Lanigan (hmlanigan) wrote :

id and name are usually interchangeable with openstack commands, but not in filters to my knowledge.

Tenant is required for v2 authentication. Project is required for scoped authorization in v3, not for unscoped authorization which juju uses.

Revision history for this message
Heather Lanigan (hmlanigan) wrote :

The id/name comment in #1 is not true for v3 authentication:
https://developer.openstack.org/api-ref/identity/v3/#authentication-and-token-management

Revision history for this message
Heather Lanigan (hmlanigan) wrote :

The openstack environment variables have less granularity between id/name than the openstack config yaml files:
https://docs.openstack.org/python-openstackclient/pike/cli/man/openstack.html

Revision history for this message
Vinodhini (vinu-b) wrote :
Changed in juju:
status: Triaged → Fix Committed
Changed in juju:
status: Fix Committed → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.