• In the [oslo_limit] section, configure access to keystone:

    [oslo_limit]
    auth_url = http://controller:5000
    auth_type = password
    user_domain_id = default
    username = glance
    system_scope = all
    password = GLANCE_PASS
    endpoint_id = ENDPOINT_ID
    region_name = RegionOne
    

    Replace GLANCE_PASS with the password you chose for the glance user in the Identity service.

    Replace ENDPOINT_ID with the ID of the image endpoint you created earlier (in our case, this would be 340be3625e9b4239a6415d034e98aace), and that you may find by running:

    $ openstack endpoint list --service glance --region RegionOne
    

    Make sure that the glance account has reader access to system-scope resources (like limits):

    $ openstack role add --user glance --user-domain Default --system all reader
    

    See the oslo_limit docs for more information about configuring the unified limits client.

  • In the [DEFAULT] section, optionally enable per-tenant quotas:

    [DEFAULT]
    use_keystone_limits = True
    

    Note that you must have created the registered limits as described above if this is enabled.