cASO 4.x cannot be run by non-admins

[enolfc]

Description

When trying to run cASO with a non-privileged account, it fails with Keystone exception

Steps to Reproduce

1. Configure authentication with a user that is just a member of projects that need to be accounted
2. Run cASO
3. 💥

   2023-07-28 11:47:39.560 1714 CRITICAL caso [-] Unhandled error: keystoneauth1.exceptions.http.Forbidden: You are not authorized to perform the requested action: identity:list_projects. (HTTP 403) (Request-ID: req-7c73189a-b89f-4495-8cdc-d91156c922a5)
   2023-07-28 11:47:39.560 1714 ERROR caso Traceback (most recent call last):
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/base.py", line 448, in list
   2023-07-28 11:47:39.560 1714 ERROR caso     list_resp = self._list(url_query, self.collection_key)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/base.py", line 141, in _list
   2023-07-28 11:47:39.560 1714 ERROR caso     resp, body = self.client.get(url, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 395, in get
   2023-07-28 11:47:39.560 1714 ERROR caso     return self.request(url, 'GET', **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 554, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 257, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     return self.session.request(url, method, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/session.py", line 811, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     base_url = self.get_endpoint(auth, allow=allow,
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/session.py", line 1243, in get_endpoint
   2023-07-28 11:47:39.560 1714 ERROR caso     return auth.get_endpoint(self, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/identity/base.py", line 375, in get_endpoint
   2023-07-28 11:47:39.560 1714 ERROR caso     endpoint_data = self.get_endpoint_data(
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/identity/base.py", line 275, in get_endpoint_data
   2023-07-28 11:47:39.560 1714 ERROR caso     endpoint_data = service_catalog.endpoint_data_for(
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/access/service_catalog.py", line 425, in endpoint_data_for
   2023-07-28 11:47:39.560 1714 ERROR caso     raise exceptions.EmptyCatalog('The service catalog is empty.')
   2023-07-28 11:47:39.560 1714 ERROR caso keystoneauth1.exceptions.catalog.EmptyCatalog: The service catalog is empty.
   2023-07-28 11:47:39.560 1714 ERROR caso
   2023-07-28 11:47:39.560 1714 ERROR caso During handling of the above exception, another exception occurred:
   2023-07-28 11:47:39.560 1714 ERROR caso
   2023-07-28 11:47:39.560 1714 ERROR caso Traceback (most recent call last):
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/bin/caso-extract", line 10, in <module>
   2023-07-28 11:47:39.560 1714 ERROR caso     sys.exit(main())
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/src/github.com/IFCA/caso/caso/_cmd/extract.py", line 33, in main
   2023-07-28 11:47:39.560 1714 ERROR caso     manager.run()
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/src/github.com/IFCA/caso/caso/manager.py", line 123, in run
   2023-07-28 11:47:39.560 1714 ERROR caso     return synchronized()
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/oslo_concurrency/lockutils.py", line 414, in inner
   2023-07-28 11:47:39.560 1714 ERROR caso     return f(*args, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/src/github.com/IFCA/caso/caso/manager.py", line 119, in synchronized
   2023-07-28 11:47:39.560 1714 ERROR caso     records = self.extractor_manager.get_records()
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/src/github.com/IFCA/caso/caso/extract/manager.py", line 249, in get_records
   2023-07-28 11:47:39.560 1714 ERROR caso     for project in self.projects:
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/src/github.com/IFCA/caso/caso/extract/manager.py", line 122, in projects
   2023-07-28 11:47:39.560 1714 ERROR caso     aux = [i.id for i in self.keystone.projects.list(tags=CONF.caso_tag)]
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/v3/projects.py", line 137, in list
   2023-07-28 11:47:39.560 1714 ERROR caso     projects = super(ProjectManager, self).list(
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/base.py", line 86, in func
   2023-07-28 11:47:39.560 1714 ERROR caso     return f(*args, **new_kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/base.py", line 453, in list
   2023-07-28 11:47:39.560 1714 ERROR caso     list_resp = self._list(url_query, self.collection_key,
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneclient/base.py", line 141, in _list
   2023-07-28 11:47:39.560 1714 ERROR caso     resp, body = self.client.get(url, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 395, in get
   2023-07-28 11:47:39.560 1714 ERROR caso     return self.request(url, 'GET', **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 554, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     resp = super(LegacyJsonAdapter, self).request(*args, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/adapter.py", line 257, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     return self.session.request(url, method, **kwargs)
   2023-07-28 11:47:39.560 1714 ERROR caso   File "/Users/enol/.virtualenvs/caso/lib/python3.10/site-packages/keystoneauth1/session.py", line 986, in request
   2023-07-28 11:47:39.560 1714 ERROR caso     raise exceptions.from_response(resp, method, url)
   2023-07-28 11:47:39.560 1714 ERROR caso keystoneauth1.exceptions.http.Forbidden: You are not authorized to perform the requested action: identity:list_projects. (HTTP 403) (Request-ID: req-7c73189a-b89f-4495-8cdc-d91156c922a5)
   2023-07-28 11:47:39.560 1714 ERROR caso
   

Expected behavior:

cASO still runs even if it cannot auto-discover projects

Actual behavior

See log above

Versions

4.2.0