octavia/releasenotes/notes/fix-application-credential-tokens-with-barbican-3b7d13283206c124.yaml
Gregory Thiemonge 851510f4c7 Fix barbican client with application credentials/trusts
It seems that keystoneauth1.identity.generic.token doesn't handle
properly the application credential/trust tokens passed by the context
of the requests. When using app credentials, Octavia failed to retrieve
the certificates from barbican.
Switching to keystoneauth1.token_endpoint fixes the issue, the
auth tokens are correctly passed to the barbican client.

Story: 2007619
Task: 39737

Change-Id: Id77ce36f59b71d309f153e5c1d44059f162ee440
(cherry picked from commit ce7f27e3b7)
2022-09-29 09:39:25 +00:00

6 lines
158 B
YAML

---
fixes:
- |
Fix an authentication error with Barbican when creating a TERMINATED_HTTPS
listener with application credential tokens or trust IDs.