token_endpoint authentication no longer working in OSC

Bug #1484373 reported by Jamie Lennox
28
This bug affects 6 people
Affects Status Importance Assigned to Milestone
os-client-config
Fix Released
Undecided
Unassigned
python-openstackclient
Invalid
Undecided
Unassigned

Bug Description

With this patch https://review.openstack.org/#/c/211773 you go to relying on the options that are published by the token_endpoint[1] which are token and endpoint. However OSC expects the options to be token and url [2]. This means when you user OS_URL it's no longer being passed through to OSC.

This is currently breaking devstack if you don't limit your requirements.

[1] https://github.com/openstack/python-keystoneclient/blob/master/keystoneclient/auth/token_endpoint.py#L46
[2] https://github.com/openstack/python-openstackclient/blob/master/openstackclient/api/auth_plugin.py#L53

description: updated
Revision history for this message
Steve Martinelli (stevemar) wrote :

looks like the immediate gate issue was resolved by fixing OCC and releasing a new version. we should look into removing the token/endpoint auth plugin from openstackclient, so i'll keep the bug open for that.

Revision history for this message
Steve Martinelli (stevemar) wrote :

OCC fix to resolve gate issues: https://review.openstack.org/#/c/212383/

Revision history for this message
Steve Martinelli (stevemar) wrote :

occ 1.6.3 released today and resolved the gate breakage: https://pypi.python.org/pypi/os-client-config/1.6.3

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Change abandoned on os-client-config (master)

Change abandoned by Jamie Lennox (<email address hidden>) on branch: master
Review: https://review.openstack.org/212377

Revision history for this message
Steve Martinelli (stevemar) wrote :

this still an issue?

Changed in python-openstackclient:
status: New → Incomplete
Revision history for this message
Javier Peña (jpena-c) wrote :

The bug has resurfaced after https://github.com/openstack/os-client-config/commit/22d740b7007e1182c99370cb2629322384b17a14 . This patch, when a token is used, unconditionally sets auth_type to 'token', which is breaking openstackclient when using token_endpoint authentication.

Revision history for this message
Steve Martinelli (stevemar) wrote :

https://review.openstack.org/#/c/260945/ resolved this patch for os-client-config, and released as of 1.13.1

Changed in os-client-config:
status: New → Fix Released
Changed in python-openstackclient:
status: Incomplete → Invalid
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Duplicates of this bug

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.