can someone cover how to install and setup keystone (identiy) v3 also?

asked 2014-06-02 12:54:10 -0500

ostackers gravatar image

only document on v2 is there in the current document:

Create a service entry for the Identity Service:

$ keystone service-create --name=keystone --type=identity \ --description="OpenStack Identity" +-------------+----------------------------------+ | Property | Value | +-------------+----------------------------------+ | description | OpenStack Identity | | id | 15c11a23667e427e91bc31335b45f4bd | | name | keystone | | type | identity | +-------------+----------------------------------+ The service ID is randomly generated and is different from the one shown here.

Specify an API endpoint for the Identity Service by using the returned service ID. When you specify an endpoint, you provide URLs for the public API, internal API, and admin API. In this guide, the controller host name is used. Note that the Identity Service uses a different port for the admin API.

$ keystone endpoint-create \ --service-id=$(keystone service-list | awk '/ identity / {print $2}') \ --publicurl=http://controller:5000/v2.0 \ --internalurl=http://controller:5000/v2.0 \ --adminurl=http://controller:35357/v2.0 +-------------+-----------------------------------+ | Property | Value | +-------------+-----------------------------------+ | adminurl | http://controller:35357/v2.0 | | id | 11f9c625a3b94a3f8e66bf4e5de2679f | | internalurl | http://controller:5000/v2.0 | | publicurl | http://controller:5000/v2.0 | | region | regionOne | | service_id | 15c11a23667e427e91bc31335b45f4bd |

No reference of the more powerful v3.0

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2014-06-26 15:47:57 -0500

mpetason gravatar image

It depends on what you are going to use it for. You can enable it but you need to use a client that has v3 options.

Use the same keystone endpoint-create option but instead of using /v2.0 use /v3.

To enable it in Horizon edit and update the keystone version from v2.0 to v3, this is commented out by default. Then edit the endpoint used for keystone, do a search for v2.0 and update it to v3.

Restart apache to load the new config. This should enable the v3 options in Horizon.

keystone endpoint-create \ --service-id=$(keystone service-list | awk '/ identity / {print $2}') \ --publicurl=http://controller:5000/v3 \ --internalurl=http://controller:5000/v3 \ --adminurl=http://controller:35357/v3

edit flag offensive delete link more

answered 2014-06-26 17:08:11 -0500

Try openstack client instead of keystoneclient. That supports keystone v3 api.

As of today cinderclient and barbican client can use keystone v3 tokens

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools


Asked: 2014-06-02 12:54:10 -0500

Seen: 229 times

Last updated: Jun 26 '14