RFE: keystone-manage CLI to allow using syslog & specific log files

[Emilien Macchi]

Currently, keystone-manage CLI tool will by default write in $log_dir/$log_file, which is most of the case /var/log/keystone.log.

Some actions (like fernet keys generations) are dynamic, and having them in a separated logfile would be a nice feature for operators. Also supporting syslog would be very helpful for production deployments.

[Morgan Fainberg (mdrnstm)]

The fernet keys should not be writable by the keystone user, typically by root (same as a certificate), therefore the log should likewise be separate to avoid breaking normal logging.

The use of syslog would easily solve this issue.

[Steve Martinelli (stevemar)]

unassigning due to inactivity

[David Stanek (dstanek)]

Unassigned due to inactivity.

[Lance Bragstad (lbragstad)]

Automatically unassigning due to inactivity.

[Colleen Murphy (krinkle)]

Is this not already handled? There is a --use-syslog option and a --log-file option for keystone-manage: https://docs.openstack.org/keystone/latest/cli/keystone-manage.html

[David Wilde (dave-wilde)]

This functionality is now available in keystone-manage