Unable to use updated openstack credentials
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Triaged
|
High
|
Unassigned |
Bug Description
Juju version: 2.9.32
Cloud: Openstack
I'm hitting an issue with authentication after updating an openstack user credential.
These are the (redacted) credentials in use:
```
juju show-credentials --controller prodstack-is-beta prodstack5 stg-jsimpso-test --show-secrets
controller-
prodstack5:
stg-
content:
password: <redacted>
username: stg-jsimpso-test
version: "3"
models:
```
That's the only credential present for that model:
```
juju show-model stg-jsimpso-test | yq eval '.stg-jsimpso-
name: stg-jsimpso-test
owner: admin
cloud: prodstack5
validity-check: valid
```
In that state, the model is able to deploy machines with no problem.
If I then update the openstack user's password (e.g.):
`openstack user set --password example1 stg-jsimpso-test --domain default`
Unsurprisingly, the model is unable to deploy a new application:
```
juju deploy ubuntu
Located charm "ubuntu" in charm-hub, revision 21
Deploying "ubuntu" from charm-hub charm "ubuntu", revision 21 in channel stable on focal
ERROR cannot add application "ubuntu": failed to get list of flavour details
caused by: authentication failed
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
This also happens when I try to "juju show-model":
```
stg-jsimpso-
{}
ERROR accessing model environment: creating environ for model "stg-jsimpso-test" (f448c790-
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
So I update the credentials and verify nothing has changed except the password:
```
juju update-credential --controller prodstack-is-beta prodstack5 stg-jsimpso-test -f mine.yaml
juju show-credentials --controller prodstack-is-beta prodstack5 stg-jsimpso-test --show-secrets
controller-
prodstack5:
stg-
content:
password: example1
username: stg-jsimpso-test
version: "3"
models:
```
After that, I can "juju show-model" as expected:
```
stg-jsimpso-
stg-jsimpso-test:
name: admin/stg-
short-name: stg-jsimpso-test
```
But I can't deploy new applications:
```
stg-jsimpso-
Located charm "ubuntu" in charm-hub, revision 21
Deploying "ubuntu" from charm-hub charm "ubuntu", revision 21 in channel stable on focal
ERROR cannot add application "ubuntu": failed to get list of flavour details
caused by: authentication failed
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
The credentials themselves work fine in other regards:
```
echo $OS_PASSWORD
example1
openstack flavor list -c Name | head -n 4
+----
| Name |
+----
| stag-cpu4-
```
It's also worth noting that if I reset the openstack password back to what it was originally & update the juju credentials accordingly, everything starts to work again.
tags: | added: canonnical-is |
tags: |
added: canonical-is removed: canonnical-is |
Changed in juju: | |
importance: | Undecided → High |
milestone: | none → 2.9.43 |
status: | New → Triaged |
tags: | added: credentials openstack-provider |
Changed in juju: | |
milestone: | 2.9.43 → 2.9.44 |
Changed in juju: | |
milestone: | 2.9.44 → 2.9.45 |
Changed in juju: | |
milestone: | 2.9.45 → 2.9.46 |
The next 2.9.46 candidate release will not include a fix for this bug and we don't plan on any more 2.9 releases. As such it is being removed from its 2.9 milestone.
If the bug is still important to you, let us know and we can consider it for inclusion on a 3.x milestone.