Unable to use updated openstack credentials
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Canonical Juju |
Triaged
|
High
|
Unassigned |
Bug Description
Juju version: 2.9.32
Cloud: Openstack
I'm hitting an issue with authentication after updating an openstack user credential.
These are the (redacted) credentials in use:
```
juju show-credentials --controller prodstack-is-beta prodstack5 stg-jsimpso-test --show-secrets
controller-
prodstack5:
stg-
content:
password: <redacted>
username: stg-jsimpso-test
version: "3"
models:
```
That's the only credential present for that model:
```
juju show-model stg-jsimpso-test | yq eval '.stg-jsimpso-
name: stg-jsimpso-test
owner: admin
cloud: prodstack5
validity-check: valid
```
In that state, the model is able to deploy machines with no problem.
If I then update the openstack user's password (e.g.):
`openstack user set --password example1 stg-jsimpso-test --domain default`
Unsurprisingly, the model is unable to deploy a new application:
```
juju deploy ubuntu
Located charm "ubuntu" in charm-hub, revision 21
Deploying "ubuntu" from charm-hub charm "ubuntu", revision 21 in channel stable on focal
ERROR cannot add application "ubuntu": failed to get list of flavour details
caused by: authentication failed
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
This also happens when I try to "juju show-model":
```
stg-jsimpso-
{}
ERROR accessing model environment: creating environ for model "stg-jsimpso-test" (f448c790-
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
So I update the credentials and verify nothing has changed except the password:
```
juju update-credential --controller prodstack-is-beta prodstack5 stg-jsimpso-test -f mine.yaml
juju show-credentials --controller prodstack-is-beta prodstack5 stg-jsimpso-test --show-secrets
controller-
prodstack5:
stg-
content:
password: example1
username: stg-jsimpso-test
version: "3"
models:
```
After that, I can "juju show-model" as expected:
```
stg-jsimpso-
stg-jsimpso-test:
name: admin/stg-
short-name: stg-jsimpso-test
```
But I can't deploy new applications:
```
stg-jsimpso-
Located charm "ubuntu" in charm-hub, revision 21
Deploying "ubuntu" from charm-hub charm "ubuntu", revision 21 in channel stable on focal
ERROR cannot add application "ubuntu": failed to get list of flavour details
caused by: authentication failed
caused by: requesting token: Unauthorised URL https://<keystone_
caused by: request (https://<keystone_
```
The credentials themselves work fine in other regards:
```
echo $OS_PASSWORD
example1
openstack flavor list -c Name | head -n 4
+----
| Name |
+----
| stag-cpu4-
```
It's also worth noting that if I reset the openstack password back to what it was originally & update the juju credentials accordingly, everything starts to work again.
tags: | added: canonnical-is |
tags: |
added: canonical-is removed: canonnical-is |
Changed in juju: | |
importance: | Undecided → High |
milestone: | none → 2.9.43 |
status: | New → Triaged |
tags: | added: credentials openstack-provider |
Changed in juju: | |
milestone: | 2.9.43 → 2.9.44 |
Changed in juju: | |
milestone: | 2.9.44 → 2.9.45 |
Changed in juju: | |
milestone: | 2.9.45 → 2.9.46 |