Usage of internal URL in clouds.yaml causes a 404

auth_url was set to the internal URL (port 5000 on the controller node), this works fine on openstack version 2.3.1 and 3.8.1, but not on 3.12.0:

    # openstack --os-cloud cloud-admin project list
    +----------------------------------+-----------+
    | ID | Name |
    +----------------------------------+-----------+
    (...)
    # grep auth /etc/openstack/clouds.yaml
        auth:
          auth_url: https://ctrl-test.iaas.h.bitbit.net:5000
        auth:
          auth_url: https://ctrl-test.iaas.h.bitbit.net:5000
    # openstack --version
    openstack 3.8.1

vs

    $ openstack --version
    openstack 3.12.0

    $ grep auth_url clouds.yaml
          auth_url: https://ctrl-test.iaas.h.bitbit.net:5000

    $ openstack --os-cloud=stage-cloud-admin project list
    The resource could not be found. (HTTP 404)

Now, if I change the auth_url to https://iaas-test.redpill-linpro.com/api/identity/v3/ it works fine. One could probably argue that the bug is in my configuration and not in openstack, but still, I think we have a real bug here.

I was digging quite a bit, and found this ...

    (Pdb) bt
      /usr/bin/openstack(10)<module>()
    -> sys.exit(main())
      /usr/lib/python3.6/site-packages/openstackclient/shell.py(213)main()
    -> return OpenStackShell().run(argv)
      /usr/lib/python3.6/site-packages/osc_lib/shell.py(134)run()
    -> ret_val = super(OpenStackShell, self).run(argv)
      /usr/lib/python3.6/site-packages/cliff/app.py(279)run()
    -> result = self.run_subcommand(remainder)
      /usr/lib/python3.6/site-packages/osc_lib/shell.py(169)run_subcommand()
    -> ret_value = super(OpenStackShell, self).run_subcommand(argv)
      /usr/lib/python3.6/site-packages/cliff/app.py(393)run_subcommand()
    -> self.prepare_to_run_command(cmd)
      /usr/lib/python3.6/site-packages/openstackclient/shell.py(200)prepare_to_run_command()
    -> return super(OpenStackShell, self).prepare_to_run_command(cmd)
      /usr/lib/python3.6/site-packages/osc_lib/shell.py(437)prepare_to_run_command()
    -> self.client_manager.auth_ref
      /usr/lib/python3.6/site-packages/openstackclient/common/clientmanager.py(99)auth_ref()
    -> return super(ClientManager, self).auth_ref
      /usr/lib/python3.6/site-packages/osc_lib/clientmanager.py(239)auth_ref()
    -> self._auth_ref = self.auth.get_auth_ref(self.session)
      /usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py(197)get_auth_ref()
    -> self._plugin = self._do_create_plugin(session)
      /usr/lib/python3.6/site-packages/keystoneauth1/identity/generic/base.py(134)_do_create_plugin()
    -> disc = self.get_discovery(session,
    > /usr/lib/python3.6/site-packages/keystoneauth1/discover.py(515)version_data()
    -> url = _combine_relative_url(self._url, link['href'])
    (Pdb) _combine_relative_url(self._url, link['href'])
    'https://ctrl-test.iaas.h.bitbit.net:5000/api/identity/v3/'

(line numbers may be a bit off, I threw in some extra debug statements into the code)

https://ctrl-test.iaas.h.bitbit.net:5000/api/identity/v3/ is an invalid URL and returns 404.