Ask Your Question
0

Keystone service V2 is enabled in Devstack Ocata by default! How to migrate to V3

asked 2017-02-02 02:00:29 -0500

maruti gravatar image

I have installed and using Devstack Ocata release (15.0.0). I realized it has installed Keystone V2 and V3! I have two queries looking for help -

  1. Is there a way to upgrade Keystone V2 to V3 with existing implementation of Devstack.
  2. In case I want to install Devstack again, is there a way to configure Keystone version to V3 before running stack.sh?

Thanks in advance.

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted
0

answered 2017-02-03 10:07:55 -0500

maruti gravatar image

First of all I am sorry that this was my wrong observation. I realized it after seeing stackrc file which contains all configurations needed for stack.sh devstack script.

Have pulled few lines from stackrc to put my understanding.

=> below replacement bash script assigns IDENTITY_API_VERSION=3 as IDENTITY_API_VERSION is not assigned any value before this line in stackrc file.

IDENTITY_API_VERSION=$(IDENTITY_API_VERSION:-3}

=> trueorfalse function assigns default value True to ENABLE_IDENTITY_V2 which is passed as first argument to this function in below line.

ENABLE_IDENTITY_V2=$(trueorfalse True ENABLE_IDENTITY_V2)

What this means essentially is both Identity v2 and v3 are configured for build and deployment in Ocata release. I confirmed same by testing openstack CLI commands by exporting OS_AUTH_URL and OS_IDENTITY_API_VERSION values to http://<ip>:5000/v2.0 and 2 for v2 and http://<ip>:5000 and 3 respectively.

I hope this all makes sense and helps someone who might have faced same confusion as I did.

Thanks.

edit flag offensive delete link more
0

answered 2017-03-22 20:56:25 -0500

kirito gravatar image

Disabling Identity API v2

The Identity API v2 is deprecated as of Mitaka and it is recommended to only use the v3 API. It is possible to setup keystone without v2 API, by doing:

ENABLE_IDENTITY_V2=False

edit flag offensive delete link more

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower

Stats

Asked: 2017-02-02 02:00:29 -0500

Seen: 755 times

Last updated: Mar 22 '17