[openstack-dev] [keystone][tripleo][ansible][puppet][all] changing default token format

Emilien Macchi emilien at redhat.com
Thu Nov 3 14:18:40 UTC 2016

On Thu, Nov 3, 2016 at 10:11 AM, Steve Martinelli
<s.martinelli at gmail.com> wrote:
> As a heads up to some of keystone's consuming projects, we will be changing
> the default token format from UUID to Fernet. Many patches have merged to
> make this possible [1]. The last 2 that you probably want to look at are [2]
> and [3]. The first flips a switch in devstack to make fernet the selected
> token format, the second makes it default in Keystone itself.
> [1] https://review.openstack.org/#/q/topic:make-fernet-default
> [2] DevStack patch: https://review.openstack.org/#/c/367052/
> [3] Keystone patch: https://review.openstack.org/#/c/345688/

Hey Steve, thanks for the heads-up.
We tried to switch the default in Puppet OpenStack and we broke
TripleO. Our team is currently working on enabling Fernet tokens in
TripleO but it might take some days/weeks.
We hope to solve this problem by ocata-2 milestone.

Emilien Macchi

More information about the OpenStack-dev mailing list