Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: set keystone federation default_authorization_ttl to 12 hours #538

Merged
merged 1 commit into from
Dec 9, 2024

Conversation

nicholaskuechler
Copy link
Contributor

Problem creating application credentials in keystone:

❯ openstack application credential create terraform-cred --restricted
BadRequestException: 400: Client Error for url: https://keystone.internal/v3/users/b22322eb26e893803f1839640e7de6c9647892c8cffe75b7603f9b168ef1afec/application_credentials, Invalid application credential: Could not find role assignment with role: 4a5321ded95d4c2caa3ebb329fd12dd5, user or group: b22322eb26e893803f1839640e7de6c9647892c8cffe75b7603f9b168ef1afec, project, domain, or system: 9c5848c68f1c41d181365eea45ed804b.

I came across some keystone bug reports:

Which led to the same solution, setting default_authorization_ttl to something greater than 0 when federating:

I just gave this a try in dev and was able to successfully create an application credential:

Screenshot 2024-12-09 at 1 22 42 PM

@cardoe cardoe added this pull request to the merge queue Dec 9, 2024
Merged via the queue into main with commit 9166f39 Dec 9, 2024
14 checks passed
@cardoe cardoe deleted the PUC-700-20241209 branch December 9, 2024 20:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants