I have created Openstack based on MAAS using juju. I have created instances, projects etc. I have made backups of database and openstack config files. I am trying test recovery by destroying and removing service keystone, just to see if it was recoverable. I also drop the keystone database. (it is backed up) So with juju i destroy the old keystone which was broken, and deploy a new keystone. This actually gets me running again except for the fact that all projects (tenants) are gone, and the instances does not belong to any project. So i restore the keystone database but without the tokens but when i do that i get an error in horizon telling me that keystone will not authorize the client.
What would be the best way to restore a broken keystone node...? It seems when you redo keystone with juju you get new tokens. can juju somehow inject the old ones into the the new keystone?