nova/releasenotes/notes/validate-expired-user-tokens-57a265cb4ee4ba6f.yaml
zhufl 0e061491aa Fix typos in release notes
This is to fix below typos in release notes:
  Keytone
  specifed
  availabilty
  maange
  expetected
  migratons
  maintanance

Change-Id: Ifbecf095f2f549d4ec40892484ec1b725927fb44
2018-03-19 18:02:30 +00:00

15 lines
836 B
YAML

---
features:
- Added support for Keystone middleware feature where if service token is
sent along with the user token, then it will ignore the expiration of user
token. This helps deal with issues of user tokens expiring during long
running operations, such as live-migration where nova tries to access
Cinder and Neutron at the end of the operation using the user token that
has expired. In order to use this functionality a service user needs to
be created. Add service user configurations in ``nova.conf`` under
``service_user`` group and set ``send_service_user_token`` flag to
``True``. The minimum Keystone API version 3.8 and Keystone middleware
version 4.12.0 is required to use this functionality.
This only currently works with Nova - Cinder and Nova - Neutron API
interactions.