Can't change "identity-url" after bootstrap

Bug #1788853 reported by Tytus Kurek
16
This bug affects 3 people
Affects Status Importance Assigned to Milestone
Canonical Juju
Triaged
Low
Unassigned

Bug Description

It looks like it is impossible to change "identity-url" after bootstrap:

$ juju controller-config identity-url="http://candid.example.com:8081/"
ERROR can't change "identity-url" after bootstrap

This is blocking an introduction of the identity manager for all existing deployments - they would need to be re-deployed.

Moreover, changing the URL of the identity manager or switching from http to https is also not possible.

There must be a way to change "identity-url" after bootstrap. At this point even hacking Juju database doesn't work.

Revision history for this message
Richard Harding (rharding) wrote :

This goes into a deeper nest as any existing entities (models, etc) and who owns then turns into different user accounts. There's no mechanism to tie existing Juju users in the DB to matching ones from the external identify service and so this is much deeper than changing the url which is locked for this very reason.

Changed in juju:
status: New → Incomplete
Revision history for this message
Launchpad Janitor (janitor) wrote :

[Expired for juju because there has been no activity for 60 days.]

Changed in juju:
status: Incomplete → Expired
Changed in juju:
status: Expired → New
Changed in juju:
status: New → Triaged
importance: Undecided → Medium
importance: Medium → Wishlist
Revision history for this message
Canonical Juju QA Bot (juju-qa-bot) wrote :

This bug has not been updated in 2 years, so we're marking it Low importance. If you believe this is incorrect, please update the importance.

Changed in juju:
importance: Wishlist → Low
tags: added: expirebugs-bot
Revision history for this message
Benjamin Allot (ballot) wrote :

Reopening this bug, as this is really important if we are to use JAAS to control our multiple juju deployments (several thousand of models).

Changing this url might be key as if any change is required on the JAAS (candid/jimm) aspect, migrating the models is out of the picture as a workaround solution.

tags: removed: expirebugs-bot
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.