Ask Your Question

Keystone service V2 is enabled in Devstack Ocata by default! How to migrate to V3

asked 2017-02-02 02:00:29 -0500

maruti gravatar image

I have installed and using Devstack Ocata release (15.0.0). I realized it has installed Keystone V2 and V3! I have two queries looking for help -

  1. Is there a way to upgrade Keystone V2 to V3 with existing implementation of Devstack.
  2. In case I want to install Devstack again, is there a way to configure Keystone version to V3 before running

Thanks in advance.

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2017-02-03 10:07:55 -0500

maruti gravatar image

First of all I am sorry that this was my wrong observation. I realized it after seeing stackrc file which contains all configurations needed for devstack script.

Have pulled few lines from stackrc to put my understanding.

=> below replacement bash script assigns IDENTITY_API_VERSION=3 as IDENTITY_API_VERSION is not assigned any value before this line in stackrc file.


=> trueorfalse function assigns default value True to ENABLE_IDENTITY_V2 which is passed as first argument to this function in below line.


What this means essentially is both Identity v2 and v3 are configured for build and deployment in Ocata release. I confirmed same by testing openstack CLI commands by exporting OS_AUTH_URL and OS_IDENTITY_API_VERSION values to http://<ip>:5000/v2.0 and 2 for v2 and http://<ip>:5000 and 3 respectively.

I hope this all makes sense and helps someone who might have faced same confusion as I did.


edit flag offensive delete link more

answered 2017-03-22 20:56:25 -0500

kirito gravatar image

Disabling Identity API v2

The Identity API v2 is deprecated as of Mitaka and it is recommended to only use the v3 API. It is possible to setup keystone without v2 API, by doing:


edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2017-02-02 02:00:29 -0500

Seen: 824 times

Last updated: Mar 22 '17