Open Stack

Hello everyone!

My organization has a need to make the user name/ID retrieval from Heat template to be case insensitive.  For example: suppose we already have a user in keystone, "xyz123".  Then we have a client that creates a heat stack containing a UserRoleAssignment resource, in which the user was specified as "XYZ123".  The user would not be found in the Keystone database (due to Keystone user IDs being case sensitive) and the role assignment would not occur.

Either Keystone could be changed so that its users are treated case insensitive, or we could make the change to heat (Heat KeystoneClientPlugin class) like in https://review.opendev.org/#/c/694117/ so that it converts to lower case before querying keystone. Can I get some thoughts on this? Would something like this be acceptable at all? Would we need to make it configurable, and if we did, would that be acceptable?

Thanks in advance for your thoughts/concerns/suggestions.

Thank you,
Cliff Parsons
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-discuss/attachments/20191113/d12634bf/attachment.html>