Ask Your Question

Changing Openstack Keystone admin endpoint

asked 2019-10-02 05:36:05 -0600

ascub gravatar image

I installed Openstack (using the Ansible-based install method) and my endpoints are:

  • public:
  • admin:
  • internal:

However, I need to change the 'admin' endpoint to the same IP used by the 'public' endpoint in order to perform admin tasks from a remote OSM. I've done so by editing the database in the Galera container and restarting both Memcached and Keystone. After these steps I'm able to see that the 'admin' endpoint has changed (e.g., using 'openstack endpoint list'). I've also edited the admin endpoint parameter within /etc/keystone/keystone.conf in the Keystone container.

Sadly, when I add the VIM (my Openstack server) to the remote OSM I receive the following error:

Not possible to get_images_list from VIM: ConnectFailure: Unable to establish connection to ('Connection aborted.', BadStatusLine("''",))

If I change the IPs the other way around, thus declaring the 'public' endpoint to use the 'admin' IP, everything works fine.

Any ideas why this may be happening? How can I change the admin endpoint throughout all the Openstack containers/services?

edit retag flag offensive close merge delete


Without testing it have you tried openstack endpoint set --interface admin --url <URL> --service keystone <ENDPOINT_ID>?

eblock gravatar imageeblock ( 2019-10-02 09:05:49 -0600 )edit

Yes, I tried that but no luck

ascub gravatar imageascub ( 2019-10-02 09:32:13 -0600 )edit

1 answer

Sort by ยป oldest newest most voted

answered 2019-10-02 09:33:33 -0600

ascub gravatar image

I solved the issue by modifying the haproxy.cfg file and forcing all containers/services to listen through both the internal and external IPs.

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2019-10-02 05:36:05 -0600

Seen: 215 times

Last updated: Oct 02 '19