We are pleased to announce that the planned maintenance of our OpenStack authentication environment was successfully completed as of November 19. This upgrade contributes to improved stability, security, and user-friendliness of our services. In addition, important follow-up maintenance is scheduled for Thursday, February 27, 2025. Below you will find all the necessary details and instructions to adjust your configuration.
Important Information
What does this mean for you?
To make optimal use of the improved infrastructure, it is essential to update your configuration. These changes apply to:
- OpenStack SDK
- OpenStack command line tools
- OpenStack API credentials
If you only use the Horizon Dashboard, you do not need to make any changes.
The required changes concern the following aspects and can be implemented immediately:
- Auth URL: The authentication URL must be updated to the new address https://auth.teamblue.cloud/.
- Region: The region settings must be updated to the correct value (AMS, AMS2 or NL).
- Domain: The domain and any domain IDs must be correctly set to transip and/or ac23823215e24239b1f693ed5a5ee2e6.
- User: If you log in with a user_id instead of your username, the prefix of your user ID must be removed.
Impact of not implementing the changes
Should you not update your configuration before Thursday, February 27, 2025, the following issues may occur:
Authentication issues:
Authentication will fail after February 26, 2025 if the Auth URL (auth_url) is not set correctly.
OpenStack Service catalog:
The catalog contains multiple regions, which can lead to random selection when creating resources (for example, a new instance or block storage). You can prevent this by explicitly specifying the desired region in your configuration.
The deadline for implementing the changes in this article is Wednesday, February 26, 2025.
Detailed Instructions
For OpenRC configuration files:
export OS_IDENTITY_API_VERSION=3
export OS_AUTH_URL="https://auth.teamblue.cloud"
export OS_PROJECT_DOMAIN_NAME="transip"
export OS_USER_DOMAIN_NAME="transip"
export OS_REGION_NAME="{AMS, AMS2 or NL}"
For YAML configuration files (clouds.yaml):
region_name: "{AMS, AMS2 or NL}"
identity_api_version: 3
auth:
auth_url: "https://auth.teamblue.cloud"
domain_name: transipNote: If the auth_url in your configuration file includes a version number, remove it (as in the examples above). Use /v3 at the end of the auth_url for legacy clients or applications that require it (for example, https://auth.teamblue.cloud/v3).
For user IDs:
When logging in with a user_id or application credential, remove the prefix:
k2k:f9e841fbdcfe456e8a88acc6c2a971af becomes f9e841fbdcfe456e8a88acc6c2a971af
tip:f9e841fbdcfe456e8a88acc6c2a971af becomes f9e841fbdcfe456e8a88acc6c2a971a
For Domain ID users:
ac23823215e24239b1f693ed5a5ee2e6Use this value, for example, under the OS_USER_DOMAIN_ID and OS_PROJECT_DOMAIN_ID options in RC configuration, or domain_id in YAML configurations.
For other applications:
Ansible/Terraform: Consult the Ansible/Terraform OpenStack documentation for specific adjustments.
Using custom applications? Check the OpenStack documentation for specific configuration adjustments to ensure compatibility.
If you have any questions following these changes, please contact us via a message in the control panel. We are happy to assist you!