Questions tagged [openstack-keystone]

Openstack's identity service

25 questions
0
votes
0 answers

Requesting access token through OpenStack Keystone very slow

I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second). To get down to the cause I used OSProfiler and it seems most of the time is…
Marlinc
  • 101
  • 2
0
votes
1 answer

containerized Openstack services

I have a difficulties in the following question: "Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-API ,etc) and nova controlling services like Nova-api…
0
votes
0 answers

Openstack authentication failure from python sdk-in jupyter notebook

I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending something else entirely instead of the token of…
0
votes
1 answer

Openstack any member of a project can delete anything from the dashboard?

Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question. To the point: users who have the "members" role of a project can delete anything in that project,…
number9
  • 253
  • 2
  • 11
0
votes
0 answers

Keystone scopes behavior is inconsistent between nova and cinder

I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be present in many components (nova, cinder, keystone,…
0
votes
0 answers

Request time out for validating and showing information of the token

I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" and I think X-Subject-Token is the authentication token…
Bani
  • 19
  • 6
0
votes
1 answer

Could not recognize Fernet token in token authentication

I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token authentication api. but the response is like…
Bani
  • 19
  • 6
0
votes
1 answer

Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?

Hello dear community, in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (docs). Here deletion is handled for "servers,…
0
votes
1 answer

Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3

I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem with. I'm getting this error after following the…
Michael Grubb
  • 13
  • 1
  • 3
-1
votes
1 answer

How can I authenticate through application credentials to OpenStack using the CLI?

I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate. Using application_credential or application_credentials as…
aef
  • 1,745
  • 4
  • 25
  • 43
1
2