Ask Your Question

Keystone Extensions: Use Cases

asked 2014-10-09 04:51:10 -0500

mathias gravatar image

Hi, I am looking at the extensions to Keystone at ( and wonder what they actually do. The incredible brief description is not exactly helpful :(

Endpoint Filtering: Ok the name says I can filter endpoints. But what can I filter for? Why would I want to do that? How can I use it?

The same questions are pretty much valid for all other extensions, too, except the Federation Extension to which I found a good explanation on YouTube.

cheers Mathias

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2014-10-09 11:43:21 -0500

If you get a token scoped to a tenant, you will get all the services endpoints in the catalog. (i.e) By default a user can see all the services

If you enable endpoint filtering, then you need to explicitly enable each endpoint for the tenant. (i.e) Everything is closed by default. This can be used to reduce the token size in case of PKI token.

You can get detail description about extension at :

Unforutnately endpoint extension was designed during havana timeframe. We have spec only from Juno. You can refer to the blueprint for older extension. You can get more details about endpoint filtering from

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2014-10-09 04:51:10 -0500

Seen: 64 times

Last updated: Oct 09 '14