glance/doc/source/install/configure-quotas.rst

• In the [oslo_limit] section, configure access to keystone:

  [oslo_limit]
  auth_url = http://controller:5000
  auth_type = password
  user_domain_id = default
  username = MY_SERVICE
  system_scope = all
  password = MY_PASSWORD
  endpoint_id = ENDPOINT_ID
  region_name = RegionOne

  Make sure that the MY_SERVICE account has reader access to system-scope resources (like limits):

  $ openstack role add --user MY_SERVICE --user-domain Default --system all reader

  See the oslo_limit docs for more information about configuring the unified limits client.

• In the [DEFAULT] section, optionally enable per-tenant quotas:

  [DEFAULT]
  use_keystone_limits = True

  Note that you must have created the registered limits as described above if this is enabled.