CobaltCore

Appearance

Keystone (Identity) ​

Keystone is the OpenStack identity service. It authenticates users and services, and provides the service catalog that clients use to discover API endpoints.

Role in CobaltCore ​

All OpenStack services (Nova, Neutron, Cinder, Glance) authenticate requests through Keystone. Users, service accounts, and automation tools obtain tokens from Keystone before calling any OpenStack API.

Key concepts ​

ConceptDescription
DomainTop-level grouping of users and projects
ProjectA tenant - the unit of resource ownership and quota enforcement
UserAn identity that can authenticate and receive tokens
RoleA set of permissions assigned to a user within a project
Service catalogThe list of services and their endpoint URLs, returned with each token

Deployment ​

Keystone is deployed via Helm as part of the OpenStack chart set. It uses a MariaDB database for its identity store.

INFO

Detailed configuration documentation (LDAP integration, federation, domain configuration) is being added. See the OpenStack Keystone docs in the meantime.

EU and German government funding logos

Funded by the European Union – NextGenerationEU.

The views and opinions expressed are solely those of the author(s) and do not necessarily reflect the views of the European Union or the European Commission. Neither the European Union nor the European Commission can be held responsible for them.

Copyright © Linux Foundation Europe.

CobaltCore is a project of Linux Foundation Europe. For applicable policies including privacy policy, terms of use and trademark usage guidelines, please see https://linuxfoundation.eu. Linux is a registered trademark of Linus Torvalds.