terraform-provider-openstack: Error creating openstack_lb_loadbalancer_v2 with use_octavia="true"

Terraform Version

11.0

Affected Resource(s)

• openstack_lb_loadbalancer_v2

Terraform Configuration Files

provider "openstack" {
  auth_url = "${ var.os_auth_url }"
  region = "${ var.os_region_name }"
  domain_name = "${ var.os_user_domain_name }"
  user_name = "${ var.os_username }"
  tenant_id = "${ var.os_project_id }"
  password = "${ var.os_password }"

  use_octavia = "${ var.use_octavia }"
}

resource "openstack_lb_loadbalancer_v2" "internal_lb" {
  name = "internal_lb"
  vip_subnet_id = "${ openstack_networking_subnet_v2.cncf.id }"
  vip_address = "${ var.internal_lb_ip }"
  security_group_ids = [ "${ var.security_group_id}" ]
} 

Debug Output

http://paste.openstack.org/show/627664/

Expected Behavior

A load balancer should have been created at the Octavia endpoint.

Actual Behavior

The computed TenantID was not passed to the Octavia endpoint, resulting in “Validation failure: Missing project ID in request where one is required.”

Steps to Reproduce

1. obtain credential on Vexxhost
2. run terraform script that creates a v2 loadbalancer using octavia

Important Factoids

Running in Vexxhost with an octavia specific endpoint. It’s worth noting that the OpenStack LBaaS team strongly discourages using the Neutron LBaaS v2 API with automation tools such as Terraform and K8s. Use of the Neutron API when backed by Octavia (rather than the direct Octavia API) can result in race conditions that will leak ports owned by the Neutron service, resulting in ports, subnets, networks, and security groups that can not be deleted by an unprivileged user.

Changing the variable use_octavia to false results in successful load balancer creation.