yahoo-eng-team team mailing list archive

[Raildo Mascena de Sousa Filho <rmascena@xxxxxxxxxx>]

Public bug reported:

We should issue an exception here since if a v3 call does not explicitly
specify the domain_id in the entity, it should be using a domain scoped
token.  However, the current tempest heat tests issue a v3 call without
this. This is raised as bug #1283539.  Once this is fixed, we should
remove the line below and replace it with an error. Ahead of actually
changing the code to raise an exception, we issue a deprecation warning.

Since we can't change the current behavior of V3, because it will be
api-breaking. We need to fix it in the Keystone microversion.

https://opendev.org/openstack/keystone/src/branch/master/keystone/server/flask/common.py#L980-L998

** Affects: keystone
     Importance: Undecided
         Status: New


** Tags: fix-requires-microversion

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Identity (keystone).
https://bugs.launchpad.net/bugs/1862802

Title:
  Avoid the default domain usage when the Domain is not specified in the
  project creation

Status in OpenStack Identity (keystone):
  New

Bug description:
  We should issue an exception here since if a v3 call does not
  explicitly specify the domain_id in the entity, it should be using a
  domain scoped token.  However, the current tempest heat tests issue a
  v3 call without this. This is raised as bug #1283539.  Once this is
  fixed, we should remove the line below and replace it with an error.
  Ahead of actually changing the code to raise an exception, we issue a
  deprecation warning.

  Since we can't change the current behavior of V3, because it will be
  api-breaking. We need to fix it in the Keystone microversion.

  https://opendev.org/openstack/keystone/src/branch/master/keystone/server/flask/common.py#L980-L998

To manage notifications about this bug go to:
https://bugs.launchpad.net/keystone/+bug/1862802/+subscriptions