Hi, I am new to openstack and I am trying to get the minimum setup to work.

Keystone seams to work fine now. There is no port 35357 anymore. The bootstrap looks like this:

# Bootstrap the Identity service
keystone-manage bootstrap --bootstrap-password "$KEYSTONE_ADMIN_PASSWORD" \
    --bootstrap-admin-url http://keystone:5000/v3/ \
    --bootstrap-internal-url http://keystone:5000/v3/ \
    --bootstrap-public-url http://keystone:5000/v3/ \
    --bootstrap-region-id RegionOne

When I try to verify the operation of glance (https://docs.openstack.org/glance/rocky/install/verify.html (https://docs.openstack.org/glance/roc...)) I get the following error:

2018-10-26 10:30:18.904 136 CRITICAL keystonemiddleware.auth_token [-] Unable to validate token: Unable to establish connection to http://keystone:5000/v3/auth/tokens: HTTPConnectionPool(host='keystone', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f511b4bc4d0>: Failed to establish a new connection: [Errno -2] No address found',)): ConnectFailure: Unable to establish connection to http://keystone:5000/v3/auth/tokens: HTTPConnectionPool(host='keystone', port=5000): Max retries exceeded with url: /v3/auth/tokens (Caused by NewConnectionError('<urllib3.connection.HTTPConnection object at 0x7f511b4bc4d0>: Failed to establish a new connection: [Errno -2] No address found',))

And this is the Clance API Config

[keystone_authtoken]
www_authenticate_uri = http://keystone:5000/v3
auth_url = http://keystone:5000/v3
memcached_servers = controller:11211
auth_type = password
project_domain_name = Default
user_domain_name = Default
project_name = service
username = glance
password = glance

And the exports:

export OS_USERNAME=admin
export OS_PASSWORD=keystone
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://keystone:5000/v3
export OS_IDENTITY_API_VERSION=3

I added the /v3 according to a bug report. But still no luck. A curl to http://keystone:5000/v3 works just fine. Any idea?

Thanks Thomas