return cloud-credentials with empty attribute

internal/jujuapi/cloud.go

@@ -321,7 +321,7 @@ func getIdentityCredentials(ctx context.Context, user *openfga.User, j JIMM, arg
 		}
 		var err error
 		content.Attributes, _, err = j.GetCloudCredentialAttributes(ctx, user, c, args.IncludeSecrets)
-		if err != nil {
+		if err != nil && errors.ErrorCode(err) != errors.CodeNotFound {
 			return nil, errors.E(err)
 		}
 		mas := make([]jujuparams.ModelAccess, len(c.Models))

internal/jujuapi/cloud_test.go

@@ -729,6 +729,33 @@ func (s *cloudSuite) TestCredentialContents(c *gc.C) {
 	}})
 }
 
+func (s *cloudSuite) TestCredentialContentsWithEmptyAttributes(c *gc.C) {
+	conn := s.open(c, nil, "test")
+	defer conn.Close()
+	client := cloudapi.NewClient(conn)
+	credentialTag := names.NewCloudCredentialTag(jimmtest.TestCloudName + "/[email protected]/cred3")
+	err := client.AddCredential(
+		credentialTag.String(),
+		cloud.NewCredential(
+			"certificate",
+			nil,
+		),
+	)
+	c.Assert(err, gc.Equals, nil)
+	creds, err := client.CredentialContents(jimmtest.TestCloudName, "cred3", false)
+	c.Assert(err, gc.Equals, nil)
+	c.Assert(creds, jc.DeepEquals, []jujuparams.CredentialContentResult{{
+		Result: &jujuparams.ControllerCredentialInfo{
+			Content: jujuparams.CredentialContent{
+				Name:       "cred3",
+				Cloud:      jimmtest.TestCloudName,
+				AuthType:   "certificate",
+				Attributes: nil,
+			},
+		},
+	}})
+}
+
 func (s *cloudSuite) TestRemoveCloud(c *gc.C) {
 	conn := s.open(c, nil, "test")
 	defer conn.Close()