Keystone should imho fail gracefully and retry indefinitely if one backend goes down for whatever reason.
Most backend failures are temporary, e.g. during maintenance windows.
Keystone should imho fail gracefully and retry indefinitely if one backend goes down for whatever reason.
Most backend failures are temporary, e.g. during maintenance windows.