Keyboard shortcuts

Press ← or → to navigate between chapters

Press S or / to search in the book

Press ? to show this help

Press Esc to hide this help

Compatibility

Keystone-NG augments Python Keystone rather than requiring an immediate full replacement. Deployments can route selected requests to either service while both implementations use compatible identity data and token formats.

API Compatibility

  • The v3 API implements an expanding subset of the OpenStack Identity API.
  • The v4 API contains Keystone-NG capabilities that are not provided by Python Keystone.
  • The generated OpenAPI document is the source of truth for routes and schemas implemented by the current build.

Do not assume that an API described by Python Keystone exists in Keystone-NG. Check the generated specification or the user API guide.

Parallel Deployment

Python and Rust Keystone can use the same deployment while a reverse proxy routes requests according to path ownership. Each implementation manages its own schema additions; database changes must not interfere with the other service. See Installation for the deployment model.

Fernet interoperability requires every node to use the same key repository. See the administrator Fernet guide.