OpenStack API token lifespan extension

Question

All,

OpenStack API issues token after successful authentication. However, it is only valid for 1 hour.

Is there any workaround or possibility to extend token's lifespan?

Thanks & Regards, Ganesh.

Answer 1

You may want to take a look at the solutions used by Heat, the OpenStack orchestration engine.

Heat needs to be able to execute actions on behalf of a user at some point in the future. Heat cannot simply store a token because, as you have stated, tokens expire.

Heat offers two solutions to "deferred authentication".

• Keystone Trusts
• Stored passwords

There are lots of details about how Heat handles this here and here.

There are some API examples of keystone trusts on the eNovance blog, and some more over here.