Questions tagged [openstack-keystone]

Openstack's identity service

24 questions
4
votes
1 answer

How does OpenStack Glance work with Keystone and what exactly are these configuration options for?

I am configuring Glance to authenticate against Keystone. It works but I am unsure exactly how some of the authentication options interact. I started with the configuring glance documentation, but this doesn't actually document any of these…
larsks
  • 41,276
  • 13
  • 117
  • 170
1
vote
1 answer

Can't install openstack kilo, stuck on keystone installation

I'm following this guide to install a testing instance of OpenStack Kilo with a very basic environment in a VirtualBox machine running Ubuntu server 14.04 x64. I've managed to get to the point where the keystone user (mariadb/mysql) has to populate…
1
vote
0 answers

Openstack - Restrict user access to Regions Or Zones

We are going to upgrade our OpenStack by adding a bunch of new compute nodes. These nodes sole purpose is to host 'tiny' instances for users to run some small-scale experiments or to test stuff. Those server specification just exceed the minimum…
Athafoud
  • 149
  • 1
  • 1
  • 13
1
vote
1 answer

OpenStack Keystone port 5000 used by Python

I'm following official OpenStack documentation to build my first environment and got stuck in configuring Keystone (last step from http://docs.openstack.org/kilo/install-guide/install/apt/content/keystone-install.html) While trying to restart apache…
1
vote
1 answer

Openstack multiple nodes: separate Glance and Keystone machines

I followed the guide on hastexo to create an OpenStack Cloud. The Keystone service and the are supposed to run on separate machines. However, when I wanted to run glance-api in the console for debugging I had the following error: ERROR: Unable to…
1
vote
0 answers

Limit user scope to a project in openstack

I have an openstack victoria cloud setup. I am using default policy of keystone and have not made any changes to that policy. I have created a test user names testuser in openstack. I assigned it primary project as testproject and admin role. But…
1
vote
0 answers

Why don't identity providers have separate IDs and Names in Openstack?

I think most of the things have a separate ID and a separate Name in Openstack (Users, Projects, virtual machines, etc). Why don't identity providers have separate IDs and Names? Are there other objects like this? Is there a rule why specific…
0
votes
2 answers

OpenStack Keystone | db_sync --check return exit code 1

Hy, I'm using Ansible OpenStack for deploy OpenStack test environment On playbook setup-openstack.yml task os_keystone : Check current state of Keystone DB fails because exit code 1 from /openstack/venvs/keystone-20.1.0.dev9/bin/keystone-manage…
CorTheZ
  • 63
  • 1
  • 5
0
votes
1 answer

Migrating Devstack to subdomain cannot login to Horizon dashboard

I changed the Apache2 virtual host to put horizon on a subdomain so I can access it easier from abroad. I added the domain and subdomain to the local_settings.py for horizon and restarted horizon. I have added the subdomain and domain to the…
0
votes
1 answer

How to solve Failed to retrieve management_url from token issue in order to login to Openstack's Horizon?

Attempt Reading this Q&A did not solve the issue. /etc/keystone/keystone.conf provided if requested /etc/openstack-dashboard/local_settings provided if requested User A user has been created and it is possible to authenticate keystone tenant-create…
030
  • 5,731
  • 12
  • 61
  • 107
0
votes
0 answers

Nginx Uwsgi Configuration For Openstack

Hello I am trying to install openstack keystone module on top of nginx in Ubuntu Server. in apache2 it's an easy process u just run apt install apache2 libapache2-mod-wsgi-py3 keystone and the wsgi config file will be automatically created in…
0
votes
1 answer

OpenStack Queens: Horizon Fails after rebooting the controller node

The controller node was rebooted and some VMs were running. After that, when logging to Horizon, I keep receiving the following error: Error: Unable to retrieve instances. And I can no longer see the VMs that was running. The following is the output…
0
votes
1 answer

Is there a way to access my OpenStack instance without floating IP?

It seems theoretically possible for me to ssh to my instance in OpenStack through credentials and instance id/network IP(Not floating IP) etc. Is it possible, am I missing something? Is it simply a feature not yet supported?
0
votes
0 answers

Openstack Wallaby: The Keystone service is temporarily unavailable

In a fresh openstack installation Nova refuses to work: root@moscontrol:~# openstack hypervisor list The server is currently unavailable. Please try again at a later time.

The Keystone service is temporarily unavailable. (HTTP 503)…
0
votes
0 answers

Requesting access token through OpenStack Keystone very slow

I have been trying to figure out why requesting an access token through OpenStack Keystone is relatively slow (lowest is about 400 ms to in some cases more than a second). To get down to the cause I used OSProfiler and it seems most of the time is…
Marlinc
  • 101
  • 2
1
2