[Keystone] Managing keystone tokens in high availability environment

Eugen Block eblock at nde.ag
Thu Apr 8 06:37:24 UTC 2021


Hi,

my first guess would be permissions. Did you check if the directory  
and files have the correct permissions? How did you distribute the keys?



Zitat von Taha Adel <eng.taha1928 at gmail.com>:

> Hello Engineers and Developers,
>
> I'm currently deploying a three-nodes openstack controller cluster,
> controller-01, controller-02, anc controller-03. I have installed the
> keystone service on the three controllers and generated fernet keys on one
> node and distributed the keys to the other nodes of the cluster. Hence, I
> have configured an HAProxy in front of them that would distribute the
> incoming requests over them.
>
> The issue is, when I try to access the keystone endpoint from using the VIP
> of the loadbalancer, the service works ONLY on the node that I have
> generated the keys on, and it doesn't work on the nodes that got the keys
> by distribution. the error message I have got is *"INTERNAL SERVER ERROR
> (500)"*
>
> In other words, the node that had* keystone-manage fernet_setup *command
> ran on it, it can run the service properly, but the others can't.
>
> Is the way of replicating the key incorrect? is there any other way?
>
> Thanks in advance






More information about the openstack-discuss mailing list