Murano CLI ignores keystone auth environment variables

Bug #1767144 reported by Mark Giles
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Murano
Fix Committed
Undecided
Ellen Batbouta

Bug Description

When using the murano CLI, environment variables related to keystone auth (such as OS_CACERT) are ignored. As a result, the only way to set these variables is to to use the command line flags which is inconsistent with the documented behavior as well as with all other openstack commands.

This appears to be because of the way the murano cli deals with the deprecated flags (cert-file, key-file, ca-file) for managing these options. Specifically, the argument parser is configured to store the values for the deprecated flags into the same attributes as used by the keystone arg parsing:
https://github.com/openstack/python-muranoclient/blob/master/muranoclient/shell.py#L103

This appears to override the default values (the environment variables) set by the call to keystone client's register_cli_options() method:
https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/session.py#L926

Changed in murano:
assignee: nobody → Ellen Batbouta (ellen-batbouta)
Revision history for this message
Ellen Batbouta (ellen-batbouta) wrote :

https://review.openstack.org/#/c/566401/

The above review contains the fix for this bug.

Changed in murano:
status: New → In Progress
Revision history for this message
Ellen Batbouta (ellen-batbouta) wrote :

Zuul has submitted this change and it was merged. ( https://review.openstack.org/566401 )

Change subject: Ignore default values for deprecated security parameters
......................................................................

Done.

Changed in murano:
status: In Progress → Fix Committed
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/python-muranoclient 1.1.0

This issue was fixed in the openstack/python-muranoclient 1.1.0 release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.