Ask Your Question

Revision history [back]

click to hide/show revision 1
initial version

A common way to configure a multi-region OpenStack cloud is to set up one Keystone. There is no easy/direct way to have more Keystones cache/store tokens, although there is a thing called "keystone federation", which basically lets you authenticate users to Keystone (and obtain a token) by "asking" another Keystone whether credentials are valid. I don't think tokens are shared in that case, every Keystone manages their own tokens.

Anyway, what you probably want to do is to have just one Keystone shared by all regions and add multiple services/endpoints with distinctive regions to its catalog. This question has also been answered a few times, e.g. take a look at: https://ask.openstack.org/en/question/8352/authentication-required-using-multiregion-2-region-with-1-keystone/