Use system_scope for Keystone operations

This change creates a Keystone client with a system_scope of all, so
that Keystone operations (i.e. getting users) do not fail.

Fixes #108
Sem-Ver: bugfix

Author: alvarolopez

caso/extract/openstack/base.py

@@ -92,7 +92,7 @@ def _get_keystone_session(self):
 
     def _get_keystone_client(self):
         """Get a Keystone Client for the configured project in the object."""
-        client = keystone_client.get_client(CONF, self.project)
+        client = keystone_client.get_client(CONF, system_scope="all")
         return client
 
     def _get_cinder_client(self):
@@ -126,11 +126,11 @@ def _get_keystone_user(self, uuid):
             user = self.keystone.users.get(user=uuid)
             return user.name
         except keystoneauth1.exceptions.http.Forbidden as e:
-            LOG.error("Unauthorized to get user")
+            LOG.error(f"Unauthorized to get user {uuid}")
             LOG.exception(e)
             return None
         except Exception as e:
-            LOG.debug("Exception while getting user")
+            LOG.debug(f"Exception while getting user {uuid}")
             LOG.exception(e)
             return None
 

doc/source/configuration.rst

@@ -36,9 +36,8 @@ usages and will fail::
     # For each of the projects, add the user with the accounting role
     openstack role add --user accounting --project <project> reader
 
-Moreover, if you wish to gather the list of projects that ``cASO`` should use directly
-from OpenStack, you need to grant the user the role reader with a system scope of
-``all``::
+Moreover, you need to grant the user the role reader with a system scope of ``all`` in
+order to get all the project tags, as well as the other user's information::
 
     openstack role add --system all --user accounting reader
 

releasenotes/notes/require-system-scope-67d0d11681beea27.yaml

@@ -0,0 +1,9 @@
+---
+upgrade:
+  - |
+    The ``reader`` role with a system scope of ``all`` must be granted to the
+    ``cASO`` user, please check the documentation.
+fixes:
+  - |
+    * `#108 <https://github.com/IFCA/caso/issues/108>`. Failure getting
+      accounting data when using different domains.