Reviewed: https://review.opendev.org/c/openstack/keystone/+/957547 Committed: https://opendev.org/openstack/keystone/commit/69e5fc55c145319f9ee6998df4553566723c226b Submitter: "Zuul (22348)" Branch: master
commit 69e5fc55c145319f9ee6998df4553566723c226b Author: Artem Goncharov <[email protected]> Date: Fri Aug 15 16:34:25 2025 +0200 Fix trusts jsonschema to support additional properties Trusts support custom setting and returning custom properties. Change jsonschema to allow additional properties. Closes-Bug: 2119543 Signed-off-by: Artem Goncharov <[email protected]> Change-Id: I49a8d1d669c6f942bc798cac093f75350692220e ** Changed in: keystone Status: Confirmed => Fix Released -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to OpenStack Identity (keystone). https://bugs.launchpad.net/bugs/2119543 Title: Keystone trusts cannot be listed Status in OpenStack Identity (keystone): Fix Released Bug description: After upgrading from 2024.1 to 2025.1, python-openstackclient gets 400 Bad Request error when use command ``openstack trust list``. This can be seen in tempest test tempest.api.identity.admin.v3.test_trusts.TrustsV3TestJSON.test_get_trusts_all as well. Traceback (most recent call last): File "/home/rally/.rally/verification/verifier-748b0ee0-bac5-4455-8f75-0f849e022e9b/repo/tempest/api/identity/admin/v3/test_trusts.py", line 296, in test_get_trusts_all trusts_get = self.trusts_client.list_trusts()['trusts'] File "/home/rally/.rally/verification/verifier-748b0ee0-bac5-4455-8f75-0f849e022e9b/repo/tempest/lib/services/identity/v3/trusts_client.py", line 54, in list_trusts resp, body = self.get(url) File "/home/rally/.rally/verification/verifier-748b0ee0-bac5-4455-8f75-0f849e022e9b/repo/tempest/lib/common/rest_client.py", line 342, in get return self.request('GET', url, extra_headers, headers, File "/home/rally/.rally/verification/verifier-748b0ee0-bac5-4455-8f75-0f849e022e9b/repo/tempest/lib/common/rest_client.py", line 762, in request self._error_checker(resp, resp_body) File "/home/rally/.rally/verification/verifier-748b0ee0-bac5-4455-8f75-0f849e022e9b/repo/tempest/lib/common/rest_client.py", line 877, in _error_checker raise exceptions.BadRequest(resp_body, resp=resp) tempest.lib.exceptions.BadRequest: Bad request Details: {'code': 400, 'message': "Invalid input for field/attribute 0. Value: {'delegation_depth': 0, 'id': '<trust id>', 'trustor_user_id': '<trustor user id>', 'trustee_user_id': '<trustee user id>', 'project_id': '<project id>', 'impersonation': True, 'expires_at': None, 'remaining_uses': None, 'deleted_at': None, 'redelegated_trust_id': None, 'redelegation_count': 0, 'links': {'self': 'https://<external keystone endpoint>:5000/v3/OS-TRUST/trusts/0428e7ecb9bc40db9a10a238851d1987'}}. Additional properties are not allowed ('delegation_depth' was unexpected)", 'title': 'Bad Request'} The change https://review.opendev.org/c/openstack/keystone/+/939583, specifically setting ``additionalProperties: False`` seems to be a root cause of this problem. To manage notifications about this bug go to: https://bugs.launchpad.net/keystone/+bug/2119543/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : [email protected] Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp
