Installing and Configuring Keystone for Openstack Queens on RHEL

Question

Run the following command to install the packages:

# yum install openstack-keystone httpd mod_wsgi

Edit the /etc/keystone/keystone.conf file and complete the following actions:

    In the [database] section, configure database access:

    [database]
    # ...
    connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@controller/keystone

    Replace KEYSTONE_DBPASS with the password you chose for the database.


    Note

    Comment out or remove any other connection options in the [database] section.

    In the [token] section, configure the Fernet token provider:

    [token]
    # ...
    provider = fernet

Populate the Identity service database:

# su -s /bin/sh -c "keystone-manage db_sync" keystone

Initialize Fernet key repositories:

# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

Bootstrap the Identity service:


Note

Before the Queens release, keystone needed to be run on two separate ports to accomodate the Identity v2 API which ran a separate admin-only service commonly on port 35357. With the removal of the v2 API, keystone can be run on the same port for all interfaces.

# keystone-manage bootstrap --bootstrap-password ADMIN_PASS \
  --bootstrap-admin-url http://controller:5000/v3/ \
  --bootstrap-internal-url http://controller:5000/v3/ \
  --bootstrap-public-url http://controller:5000/v3/ \
  --bootstrap-region-id RegionOne

Replace ADMIN_PASS with a suitable password for an administrative user.

Configure the Apache HTTP server¶

Edit the /etc/httpd/conf/httpd.conf file and configure the ServerName option to reference the controller node:

ServerName controller

Create a link to the /usr/share/keystone/wsgi-keystone.conf file:

# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

Finalize the installation¶

Start the Apache HTTP service and configure it to start when the system boots:

# systemctl enable httpd.service
# systemctl start httpd.service

Configure the administrative account

$ export OS_USERNAME=admin
$ export OS_PASSWORD=ADMIN_PASS
$ export OS_PROJECT_NAME=admin
$ export OS_USER_DOMAIN_NAME=Default
$ export OS_PROJECT_DOMAIN_NAME=Default
$ export OS_AUTH_URL=http://controller:35357/v3
$ export OS_IDENTITY_API_VERSION=3

After finishing these configuration: I ran openstack domain create --description "An Example Domain" example

Output: Service Unavailable (HTTP 503) Checked every configuration files like keystone.conf, Httpd.conf etc. but not able to get to the root of the issue.

Any suggestions?

Installing and Configuring Keystone for Openstack Queens on RHEL

0 Answers0