# <no title>

- In the `[oslo_limit]` section, configure access to keystone:

      [oslo_limit]
      auth_url = http://controller:5000
      auth_type = password
      user_domain_id = default
      username = MY_SERVICE
      system_scope = all
      password = MY_PASSWORD
      endpoint_id = ENDPOINT_ID
      region_name = RegionOne

  Make sure that the MY_SERVICE account has reader access to system-scope resources (like limits):

      $ openstack role add --user MY_SERVICE --user-domain Default --system all reader

  See the oslo_limit docs for more information about configuring the unified limits client.

- In the `[DEFAULT]` section, optionally enable per-tenant quotas:

      [DEFAULT]
      use_keystone_quotas = True

  Note that you must have created the registered limits as described above if this is enabled.

this page last updated: 2026-03-19 02:17:34

Except where otherwise noted, this document is licensed under Creative Commons Attribution 3.0 License. See all OpenStack Legal Documents.

found an error? report a bug