--insecure is ignored if OS_CACERT env var is set

This is similar to https://bugs.launchpad.net/python-openstackclient/+bug/1447704 but for different arguments.

I think we need to remove defaulting argparse stuff from the environment, it is the only way to tell the difference between a command line argument and something from the environment. I put this together https://review.openstack.org/#/c/172941/ which would solve this problem, but I'm not sure what the desired solution is.

Terry, this is really a question of precedence, the same thing would happen using global options. ATM, --os-cacert overrides --insecure. This report argues for the opposite. The more I think about it, I think I agree that --insecure should have a higher precedence than --os-cacert.

This bug impacts me also. It seems like openstackclient didn't respect --insecure. I have to use python-keystoneclient for work around for now

root@openstack-keystone:/# export OS_TENANT_NAME=admin
root@openstack-keystone:/# export OS_PROJECT_NAME=admin
root@openstack-keystone:/# export OS_USERNAME=admin
root@openstack-keystone:/# export OS_PASSWORD=adminpass
root@openstack-keystone:/# export OS_AUTH_URL=http://identity.example.com/v2.0

root@openstack-keystone:/# openstack --insecure user list
WARNING: keystoneclient.auth.identity.generic.base Discovering versions from the identity service failed when creating the password plugin. Attempting to determine version from URL.
WARNING: openstackclient.shell Possible error authenticating: SSL exception connecting to https://identity.example.com/v2.0/tokens
ERROR: openstack SSL exception connecting to https://identity.example.com/v2.0/tokens

root@openstack-keystone:/# keystone user-list
Authorization Failed: SSL exception connecting to https://identity.example.com/v2.0/tokens

root@openstack-keystone:/# keystone --insecure user-list
+----------------------------------+-------+---------+---------------------------+
| id | name | enabled | email |
+----------------------------------+-------+---------+---------------------------+
| 4e72838934e84002923439542b0b3e8e | admin | True | <email address hidden> |
+----------------------------------+-------+---------+---------------------------+

thanks for your feedback @winggundamth

I clearly am still doing something wrong here... the review: https://review.openstack.org/188417

Reviewed: https://review.openstack.org/188417
Committed: https://git.openstack.org/cgit/openstack/python-openstackclient/commit/?id=31d785ec6951a84f831ea3dfd49214c42ae4fd26
Submitter: Jenkins
Branch: master

commit 31d785ec6951a84f831ea3dfd49214c42ae4fd26
Author: Dean Troyer <email address hidden>
Date: Thu Jun 4 09:20:29 2015 -0500

    Allow --insecure to override --os-cacert

    Change --insecure to ignore the --os-cacert setting. This is a change
    from before where OSC followed the requests pattern of cacert taking
    priority.

    This logic is also introduced in os-client-config 1.3.0; we
    do not require that release yet so it is duplicated here for now.
    That change will come with the upcoming global options refactor.

    Closes-Bug: #1447784
    Change-Id: Iaa6d499ed0929c00a56dcd92a2017487c702774a

Change abandoned by Steve Martinelli (<email address hidden>) on branch: master
Review: https://review.openstack.org/183567
Reason: refer to https://review.openstack.org/#/c/179367/