GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \

First one for authenticating using localhost, and second one authenticating other services with keystone from any other nodes in the cluster. Answer for your question is you can mention localhost