Ask Your Question

keystone pacemaker in Liberty

asked 2016-02-23 23:07:50 -0500

zhou16386 gravatar image

updated 2016-05-24 02:47:13 -0500

Hi all,

I am trying to setting up the Liberty version of openstack with the pacemaker HA solution. As in the current version of openstack, the keystone leverage on the apache wsgi to serve, does it mean if I can make the httpd HA works fine, then the keystone works fine?

I can find the ocf:openstack:apache in the pcs rescource agent, at the same time I can also find the ocf:openstack:keystone, which one should I leverage?

And any other specification I need to pay attention to?

please kindly let me know your remark. (

not sure whether anybody has used the ocf in this link? is the ocf there still has their API up to date?

Thanks and best regards

edit retag flag offensive close merge delete

1 answer

Sort by ยป oldest newest most voted

answered 2016-02-27 23:15:34 -0500

I personally wouldn't use a pacemaker setup for Keystone, since Keystone is horizontal scalable per design.

The best imho would be to set up a HAProxy cluster (here comes pacemaker in), send Keystone related HTTP/S requests - using a virtual IP address - to HAProxy and balance over some Keystone nodes.

With that setting the Keystone nodes will be independent, which makes it a lot easier for maintenance work, scaling etc.

cheers, hauke

edit flag offensive delete link more


Sorry didn't log for long. In one of my enviroment, I built the keystone behind the HAproxy. but it is a little bit different from what you have described. I built a resource in pcmk for apache (which is serving as keystone) too. (

zhou16386 gravatar imagezhou16386 ( 2016-05-24 02:44:15 -0500 )edit

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2016-02-23 23:07:50 -0500

Seen: 254 times

Last updated: May 24 '16