How "validated client-side (in the nova pipeline) without reaching out to keystone" ? I don't understand, If it not reach keystone, how nova know user's token is valid or not ? How nova make this decision ?
And, when would a revoke happen ?
How "validated client-side (in the nova pipeline) without reaching out to keystone" ? I don't understand, If it not reach keystone, how nova know user's token is valid or not ? How nova make this decision ?
And, when would a revoke happen ?