Hi there
I would like to move keystone as service to another server. The new server would get the IP from the old one. About fernet-keys. Do I have to copy the folder for fernet-keys? Or could I create just new fernet-keys? A planned dowtime of the complete environment is no problem.
best Darko
If I understood it right the keys are only for encrypting the fernet tokens. With a planned downtime you shouldn't face any issue when the system comes back again and re-issues new tokens with the new keys. The old tokens will be all expired.
If you are planning to use keystone from another server then below are the points that need to be considered
Low network latency between two servers (OpenStack server and Remote keystone server on which you are planning to use keystone)
Keystone client is used on your new server with the same version as OpenStack Server
Then you can be able to use keystone from different server
Asked: 2017-04-01 14:05:08 -0500
Seen: 201 times
Last updated: Aug 03 '17
