Questions tagged [openstack-keystone]

46 questions
1
vote
1 answer

How can I get access to an objects attribute when it is part of a list of objects

I am using the python-keystoneclient module within a Django project basically to learn. The environment: python 3.6.3 django 1.10.8 python-keystoneclient 3.14.0 I have a query to the api that returns a list of objects projects =…
Lance Haig
  • 332
  • 4
  • 13
0
votes
0 answers

Failed to discover available identity versions when contacting https://172.28.68.39:13000//v3

I have an issue with our openstack client to access openrc.sh in openstack with error below. As I read openstack guide, it says that I should include OS_CACERT but our customer does not want to give the path in their horizon but instead give us the…
0
votes
0 answers

OpenStack - keystone did not start

I got this problem during instalation devstack: ./stack.sh:1123:start_keystone /opt/stack/devstack/lib/keystone:578:die [ERROR] /opt/stack/devstack/lib/keystone:578 keystone did not start Error on exit World dumping... see…
0
votes
0 answers

Not able to create instance on new openstack

While creating instance from horizon "zed" version Iam getting below error in nova.log. 2023-05-30 22:24:12.985 2387910 ERROR nova.api.openstack.wsgi File "/usr/lib/python3/dist-packages/keystoneauth1/session.py", line 1141, in get 2023-05-30…
hgi2000
  • 1
  • 1
0
votes
0 answers

Getting " no such table: cell_mappings" error while installing nova

I was following the product doumentation "https://docs.openstack.org/nova/2023.1/install/verify.html" after the nova insalltion is complete on my contrller and compute node Iam seeing the " no such table: cell_mappings" while veryifying the…
hgi2000
  • 1
  • 1
0
votes
0 answers

How to authenticate a user in Openstack keystone who is getting authenticated in application by Azure AD

In my application set up I am using Keycloak as an indentity broker for my application whose users are getting authenticated through Azure AD. Now once user is authenticated, i need to authenticate/validate the user again in keystone so that they…
0
votes
0 answers

How to send tracing in OpenStack OSProfiler whenever receiving the HTTP requests

I set up OSprofiler to the Keystone component, it worked well when I use CLI with the --os-profile suffix to get the list of all users, and I can get the tracing data in Jaeger. But when I use HTTP requests with the same activity, I can not get…
Claire Duong
  • 103
  • 1
  • 7
0
votes
0 answers

Keystone create is not a recognized Fernet token

While creating a keystone service, I get an error This is not a recognized Fernet token 6518170426eb18bd6696 (HTTP 404) (Request ID: req-6efa9a54-a6ca-41d1-b137-a76280423f47) Here are my detailed steps Сonfigure keystone: crudini --set…
0
votes
0 answers

How to create a policy to limit which and how many floating IP projects can assign

In our OpenStack we have some intranet external networks as well as public ones. At the moment if I allow access from the project to both networks, users can assign as many floating IP addresses as they are allowed by Quota. What we want to achive…
0
votes
0 answers

Why horizon give me token scope errors?

I installed openstack-ansible 24.2.0. When I access to horizon dasboard as admin (or other user) in the apache log I have these and more similar lines: /openstack/venvs/horizon-24.4.1/lib/python3.9/site-packages/oslo_policy/policy.py:1075:…
0
votes
0 answers

Can external API endpoints be registered in Openstack Keystone service catalogue/registry?

We are developing few wrapper APIs (in SpringBoot and Python) on top of Openstack components like Nova, Neutron and glance. As Keystone works as a service registry for internal Openstack APIs, is it possible to register our custom wrapper APIs in…
MKP010
  • 61
  • 1
  • 4
  • 11
0
votes
1 answer

How do I enable logging of successful authorizations in keystone?

Can you tell me how to enable successful authorization events in keystone? I have studied the documentation, but it only says that these events are disabled by default. I tried specifying the notification = identity.authenticate.success parameter in…
0
votes
1 answer

Is there a way to check the life of a token?

I need to check if the token is valid every time I run the script. In case it is valid, but skip the procedure for generating a new token. Is it possible to implement this by means of api? I receive a token through curl export SYS_TOKEN=curl…
Kaber
  • 35
  • 5
0
votes
0 answers

openstack : Deleted a project/tenant my mistake. How to restore it without rolling back the controller DB backup

I had deleted the admin project because of which non of the openstack command works. I am able to restore the problem by rolling back the controller DB backup. The DB backup requires various steps and it takes time. In some of the posts it is…
0
votes
2 answers

Configure the administrative account

I'm deploying openstack- stein version on ubuntu pro 18.04 LTS. I come across these lines when configuring keystone - identity service, as of this article. Would anybody please explain how to set this following configuration: $ export…
CloudRock
  • 159
  • 2
  • 5
  • 14