Openstack's identity service
Questions tagged [openstack-keystone]
25 questions
0
votes
0 answers
Requesting access token through OpenStack Keystone very slow
I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second).
To get down to the cause I used OSProfiler and it seems most of the time is…

Marlinc
- 101
- 2
0
votes
1 answer
containerized Openstack services
I have a difficulties in the following question:
"Does it make sense to containerized/dockerize the openstack controlling services like Neurtron/Cinder/Glance/Keystone server services (neutron-API ,etc) and nova controlling services like Nova-api…

user393397
- 37
- 4
0
votes
0 answers
Openstack authentication failure from python sdk-in jupyter notebook
I have been trying to make a simple connection to Openstack cloud using python-openstack sdk. With no success. Can someone tell me where I am going wrong? I can see that the header is sending something else entirely instead of the token of…

Vishwa Mithra Tatta
- 121
- 6
0
votes
1 answer
Openstack any member of a project can delete anything from the dashboard?
Just installed Openstack victoria. Was using a previous version. For some reason I am having a bit of trouble searching the web for this question.
To the point: users who have the "members" role of a project can delete anything in that project,…

number9
- 253
- 2
- 11
0
votes
0 answers
Keystone scopes behavior is inconsistent between nova and cinder
I've been trying to update our OpenStack installation to use new options enforce_new_defaults and enforce_scope since in Wallaby for nova old policies will be deprecated. Those option seem to be present in many components (nova, cinder, keystone,…
0
votes
0 answers
Request time out for validating and showing information of the token
I could not understand what the difference of X-Auth-Token and X-Subject-Token is. I read in the documentation that "X-Auth-Token is a valid authentication token for an administrative user" and I think X-Subject-Token is the authentication token…

Bani
- 19
- 6
0
votes
1 answer
Could not recognize Fernet token in token authentication
I have username and password. I would like to authentication the token. First, I sent a request to password authentication api of keystone and I got an audit_id. Then, I send a request to token authentication api. but the response is like…

Bani
- 19
- 6
0
votes
1 answer
Openstack: Are components related to a keystone::project auto garbage-collected upon project deletion?
Hello dear community,
in the research of how to properly delete projects and their resources via the OpenStack API I was only able to find a hint in the official python sdk, the project_purge.py (docs). Here deletion is handled for "servers,…

chris polzer
- 103
- 3
0
votes
1 answer
Failed to discover available identity versions when contacting http://xxx.xxx.xxx.xxx:5000/v3
I've searched high and low for a resolution to this, and it seems that most people are having issues with the service not running at all or not being able to connect, which I am not having a problem with.
I'm getting this error after following the…

Michael Grubb
- 13
- 1
- 3
-1
votes
1 answer
How can I authenticate through application credentials to OpenStack using the CLI?
I know how to authenticate through user credentials and token to OpenStack via the openstack CLI. Now I would like to know how to use application credentials to authenticate.
Using application_credential or application_credentials as…

aef
- 1,745
- 4
- 25
- 43