Comment 4 for bug 1743603

prashkre - just to clarify, in nova.conf's [keystone_authtoken] section you have service_token_roles_required set to true (which should suppress this log warning), and this message is appearing in the nova logs anyways?

Lance - I think these parameters are already defined in keystonemiddleware.auth_token so we shouldn't have to change anything about nova, or if we do it will be more work than just adding parameters.

yangweiwei - Removing the log warning entirely is not an option, it is there for a valid reason. It's unfortunately not well documented, except for in the release notes that added it: https://docs.openstack.org/releasenotes/keystonemiddleware/ocata.html