OpenStack Identity (keystone)

Can nova/glance cache the keystone token or not?

Asked by yang, yuxing

as we know that nova uses keystone to authenticate user, but can nova/glance cache the keystone token, or verify with keystone every time?

Question information

Language:
English Edit question
Status:
Answered
For:
OpenStack Identity (keystone) Edit question
Assignee:
No assignee Edit question
Last query:
Last reply:
Revision history for this message
Ziad Sawalha (ziad-sawalha) said : 		#1

The token response mentions the expiration date. nova/glance can choose to cache it (but they risk the token being invalidated in keystone and they still honor it). I propose caching for a shorter time period that is acceptable to the operator.

Can you help with this problem?

Provide an answer of your own, or ask yang, yuxing for more information if necessary.

To post a message you must log in.