Stack Overflow
Stack Overflow

Questions tagged [keystone]

Keystone is the identity service used by OpenStack for authentication.

Essentially keystone's role is to grant tokens to users be they people, services, or anything at all.

If you make an API query anywhere in OpenStack, keystone's API is how it is discovered if you are allowed to make that API query.

247 questions
21
votes
4 answers

The relationship between endpoints, regions, etc in keystone OpenStack

I'm really trying to understand the under the hood of keystone regarding the relationships among endpoints, regions, tenants, services, users and roles. I've tried to find the related documents but sadly, failed. Could anybody give any pointers or…
jaeyong
  • 8,951
  • 14
  • 50
  • 63
12
votes
3 answers

Kubernetes Readiness probe failed: dial tcp 10.244.0.10:5000: connect: connection refused

I have a simple service and pod as described below but the readiness probe fails complaining for connection refused apiVersion: v1 kind: Service metadata: name: keystone-api spec: selector: app: keystone ports: - protocol: TCP …
Saurabh Arora
  • 377
  • 2
  • 4
  • 11
4
votes
1 answer

Unexpected token `tag` expected in pug

I am working with pug in keystone and while adding side navigation i am getting error like this. > 6| a(href="#")About --------------------^ 7| a(href="#")Services 8| a(href="#")Client 9| a(href="#")Contact Unexpected token `tag` expected `text`,…
AKSHAY SALEKAR
  • 76
  • 1
  • 1
  • 9
4
votes
0 answers

Keystone with Material Design Bootstrap Incompatible units: 'rem' and 'px'

Did anyone managed to add the SCSS from Material Design Bootstrap in the default template of Keystone.js ? I am new to node.js and front-end development so I am not sure what I am doing but, I bascially added the MDB folder in my public/styles.…
Karl-John Chow
  • 775
  • 2
  • 8
  • 26
3
votes
1 answer

Any workaround to the "Could not find prisma-fmt binary" error when installing KeystoneJS?

I'm running into this issue when trying to install KeystoneJS (tried locally with node and npm up to date and in a node:16-alpine docker image). > keystone-app@1.0.0 postinstall > keystone postinstall Error: Could not find prisma-fmt binary.…
Camopy
  • 125
  • 1
  • 12
3
votes
0 answers

Reset OpenStack admin password

I have installed openstack on my VM. I changed my admin password but I do not know it(I have generated via keepass, but forget to save it :( ) Now I want to change it. stack@smaug:~/devstack$ openstack user password set --password somepassword…
Daniel Hornik
  • 1,957
  • 1
  • 14
  • 33
3
votes
0 answers

OpenStack Keystone: "The service catalog is empty." after issuing any command

I'm just back after installing Keystone following the OpenStack docs: Install and configure of Keystone. I'm running CentOS 7 and OpenStack Stein. I've noted on this page a missing step on the recipe (keystone-manage db_sync that creates the tables…
Francesco Piraneo G.
  • 882
  • 3
  • 11
  • 25
3
votes
0 answers

Unable to create a stable websocket implementation

Usecase: This runs on the server side (Keystone) of an Android application App connects to the socket with the user's accesstoken App shows indicators for all the other user's who are connected to the socket When a user changes some data in the…
horstenwillem
  • 110
  • 2
  • 11
3
votes
0 answers

Where is the keystone virtual configuration file in Devstack?

Where is the file wsgi-keystone.conf located in the Devstack env? I am trying to configure federation. I only can see this file: keystone-wsgi-public.conf Which contains: ProxyPass "/identity"…
Poonam
  • 31
  • 1
3
votes
0 answers

Ceilometer HTTP 404 Not Found

I am using pike release of openstack and ceilometer version 2.9.0 and keystone v3. $ceilometer meter-list gives HTTP 404 Not Found error $gnocchi metric list --> HTTP 401 $openstack metric list ---> lists the meters (works) . However in yaml…
scorp
  • 41
  • 2
3
votes
1 answer

Fiware: How to restrict user access to specific entity for Orion Context Broker API using keystone & keypass

First of all, I'm using the Telefonica implementations of Identity Manager, Authorization PDP and PEP Proxy, instead of the Fiware reference implementations which are Keyrock, AuthZForce and Wilma PEP Proxy. The source code and reference…
Emiliano Viotti
  • 1,619
  • 2
  • 16
  • 30
3
votes
2 answers

Setting up PEP Proxy

I've been working on regards the PEP-Proxy-Steelskin so I can provide some security layer to my Orion Context, however, there are some issues that have been blocking my progress. I will like to use the IDM and Keystone Global Instances. I've…
netzahdzc
  • 237
  • 1
  • 10
3
votes
1 answer

Fiware KeyRock API bug: Membership of organisations not returned

As part of the FINISH accelerator we are using FIWARE KeyRock and Wirecloud. Currently we are using the Fiware labs global instance to investigate. We want to restrict our system so that users can only view data that belongs to the organisations of…
Robin
  • 103
  • 9
3
votes
1 answer

Keyrock doesn't accept user, even when using admin

I got two users created by me, admin, with admin permissions, and another user, now with admin permissions too, but initially community (i'll be referring to this account as community). I've registered an application with the community user and…
jccampos
  • 354
  • 3
  • 9
3
votes
1 answer

Not authorized to list projects with keystone v3?

I set up keystone v3, and then created a domain dom1, a user adm1 and grant this user to admin role. Authenticate this user with domain scope. Then create a project under dom1. I tried to list projects with the same token that created the project.…
talihsu
  • 175
  • 3
  • 13
1
2 3
…
16 17