Services and the [keystone_authtoken]
Because most OpenStack services must access the Identity
Service, you must configure the IP address of the
keystone
server to be able to access it. You must
also configure the admin_tenant_name
,
admin_user
, and admin_password
options
for each service to work.
Generally, this section looks like this:
[keystone_authtoken]
auth_uri = http://controller:5000/v2.0
identity_uri = http://controller:35357
admin_tenant_name = %SERVICE_TENANT_NAME%
admin_user = %SERVICE_USER%
admin_password = %SERVICE_PASSWORD%
The debconf system helps users configure the
auth_uri
, identity_uri
,
admin_tenant_name
, admin_user
and
admin_password
options.
The following screens show an example Image service
configuration:
This information is stored in the configuration file for each
service. For example:
/etc/ceilometer/ceilometer.conf
/etc/nova/api-paste.ini
/etc/glance/glance-api-paste.ini
/etc/glance/glance-registry.ini
/etc/cinder/cinder.conf
/etc/neutron/neutron.conf
The Debian OpenStack packages offer automation for this, so
OpenStack users do not have to manually edit the configuration
files.