Ask Your Question

how to change keystone endpoint url for DevStack

asked 2019-04-13 18:30:34 -0600

cw gravatar image

I use DevStack to install OpenStack Pike, the default url for keystone is How can I set it to using local.conf before installation or CLI after installation?

edit retag flag offensive close merge delete

1 answer

Sort by » oldest newest most voted

answered 2019-04-14 02:53:31 -0600

Hi cw,

The service endpoint URLs are stored in endpoints table in keystone database. You can change the endpoint URL by changing the URL in the database. After changing the URL in database you should run keystone db_sync command( su -s /bin/sh -c "keystone-manage db_sync" keystone)

edit flag offensive delete link more


That’s not sufficient. The configuration files of most other services (Nova, Neutron etc) contain the Keystone endpoint, so that you would have to adapt those as well.

Bernd Bausch gravatar imageBernd Bausch ( 2019-04-14 05:23:31 -0600 )edit

I run the db_sync command after modifying keystone.endpoint url in mysql $ su -s /bin/sh -c "keystone-manage db_sync" keystone No passwd entry for user 'keystone' Do you know how to fix this? Can I directly run 'keystone-manage db_sync`?

cw gravatar imagecw ( 2019-04-14 17:58:44 -0600 )edit

It looks like Devstack doesn't set up Linux users that correspond to the OpenStack services. I.e. there are no keystone, nova, neutron etc accounts. I would try to run this command as root.

Don't forget to update all those configuration files that contain the Keystone endpoint.

Bernd Bausch gravatar imageBernd Bausch ( 2019-04-14 20:05:45 -0600 )edit

Could you tell me what is the keystone endpoint in config files?
I only change the 'public_endpoint' in keystone.conf
In nova.conf, there is a config 'auth_url =' under [keystone_authtoken], but I think it connects to keystone admin_endpoint and should not be changed.

cw gravatar imagecw ( 2019-04-15 04:45:14 -0600 )edit

Yes, I meant the keystone_authtoken sections in configuration files. You will find the same section everywhere.

I didn't know you only wanted to change the public endpoint. If you keep the admin endpoint at /identity, there should be no problem.

Bernd Bausch gravatar imageBernd Bausch ( 2019-04-15 05:54:13 -0600 )edit

Your Answer

Please start posting anonymously - your entry will be published after you log in or create a new account.

Add Answer

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2019-04-13 18:30:34 -0600

Seen: 365 times

Last updated: Apr 14 '19