Editing quota from a project in Horizon is removing users from the project with keystone v3 and multi domains setup

Solution In Progress - Updated -

Issue

While editing quota from a project in Horizon , this action is removing users from the project.

We are using Keystone v3 with multi domains setup.

I create a project in "Default" Keystone domain:

# openstack project create test
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | default                          |
| enabled     | True                             |
| id          | ceae5812586c4d7e915199c6dd5f4868 |
| is_domain   | False                            |
| name        | test                             |
| parent_id   | None                             |
+-------------+----------------------------------+

I add a user from a different domain (TESTDOM, an LDAP domain) like this:

# openstack role add --project test --user-domain TESTDOM --user domuser2 _member_

I verify the user is properly located in the project:

# openstack user list --project test
+------------------------------------------------------------------+-----------+
| ID                                                               | Name      |
+------------------------------------------------------------------+-----------+
| 13e3a99ae7410be0e41167d3d6fae7dea1b6d0c99362507c5c3b8c26a7b3bc1f | domuser1  |
| e9adb93931a3356afbb817f9c2a17046d1ac9127f1112f9751fdb09efe5046fb | domuser2  |
+------------------------------------------------------------------+-----------+

At this point the user can connect to Horizon with the TESTDOM domain and it's LDAP credential and do actions in OpenStack.

Then I log in the Horizon dashboard by using my account (which is admin) ldap credential and TESTDOM domain.
I go in identity -> Projects -> on test project I do "Edit quota" -> I modify the number of instance from 10 to 15 -> update.

At this point Horizon removed all the users not belonging to the Default domain and that were assigned to this tenant!

# openstack user list --project test

#

Environment

  • Red Hat OpenStack Platform 8.0

Subscriber exclusive content

A Red Hat subscription provides unlimited access to our knowledgebase, tools, and much more.

Current Customers and Partners

Log in for full access

Log In

New to Red Hat?

Learn more about Red Hat subscriptions

Using a Red Hat product through a public cloud?

How to access this content