Keystone K8S

Learn about configurations >

• catalog-cache-expiration | int

  Default: 60

  Amount of time (in seconds) the catalog should be cached for.

• debug | boolean

  Enable debug logging.

• dogpile-cache-expiration | int

  Default: 60

  Amount of time (in seconds) to cache items in the dogpile.cache. This only applies to cached methods that do not have an explicitly defined cache expiration time.

• enable-telemetry-notifications | boolean

  Enable notifications to send to telemetry.

• identity-backend | string

  Default: sql

  Keystone identity backend, valid options are sql and pam

• log-level | string

  Default: WARNING

  Log level (WARNING, INFO, DEBUG, ERROR)

• region | string

  Default: RegionOne

  Name of the OpenStack region

• saml-x509-keypair | secret

  The SAML2 x509 certificates. This certificate is used by SAML2 for two purposes:

  • Sign messages between the SP and the IDP
  • Encrypt messages. This is rarely used as in the majority of cases, SAML2 traffic is sent over https. This certificate will be part of the SAML2 metadata. The secret is expected to have two keys:

  { "certificate": "contents of the certificate", "key": "contents of the key" }

  You can upload the secrets by running:

  juju add-secret saml-secret
  certificate#file=/path/to/cert.pem
  key#file=/path/to/corresponding/key juju grant-secret saml-secret keystone