As I saw heat`s ec2tokens can work only with keystone v2 URL. It happens because keystone has different responses for v2 and v3 versions for token request by ec2 credentials. I found same problem in our ec2api project and keystonemiddleware project. For example: Patch for our ec2api project will be here - https://review.openstack.org/#/c/209085/2/ec2api/api/__init__.py Patch for keystonemiddleware is here - https://review.openstack.org/#/c/205440/ -- Kind regards, Andrey Pavlov. -------------- next part -------------- An HTML attachment was scrubbed... URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150805/848f579e/attachment.html>