Define services and API endpoints

So that the Identity Service can track which OpenStack services are installed and where they are located on the network, you must register each service in your OpenStack installation. To register a service, run these commands:

  • keystone service-create. Describes the service.

  • keystone endpoint-create. Associates API endpoints with the service.

You must also register the Identity Service itself. Use the OS_SERVICE_TOKEN environment variable, as set previously, for authentication.

  1. Create a service entry for the Identity Service:

    # keystone service-create --name=keystone --type=identity \
      --description="Keystone Identity Service"
    +-------------+----------------------------------+
    |   Property  |              Value               |
    +-------------+----------------------------------+
    | description | Keystone Identity Service        |
    | id          | 15c11a23667e427e91bc31335b45f4bd |
    | name        | keystone                         |
    | type        | identity                         |
    +-------------+----------------------------------+

    The service ID is randomly generated and is different from the one shown here.

  2. Specify an API endpoint for the Identity Service by using the returned service ID. When you specify an endpoint, you provide URLs for the public API, internal API, and admin API. In this guide, the controller host name is used. Note that the Identity Service uses a different port for the admin API.

    # keystone endpoint-create \
      --service-id=the_service_id_above \
      --publicurl=http://controller:5000/v2.0 \
      --internalurl=http://controller:5000/v2.0 \
      --adminurl=http://controller:35357/v2.0
    +-------------+-----------------------------------+
    |   Property  |             Value                 |
    +-------------+-----------------------------------+
    | adminurl    | http://controller:35357/v2.0      |
    | id          | 11f9c625a3b94a3f8e66bf4e5de2679f  |
    | internalurl | http://controller:5000/v2.0       |
    | publicurl   | http://controller:5000/v2.0       |
    | region      | regionOne                         |
    | service_id  | 15c11a23667e427e91bc31335b45f4bd  |
    +-------------+-----------------------------------+
  3. As you add other services to your OpenStack installation, call these commands to register the services with the Identity Service.

Log a bug against this page


loading table of contents...