eabf2cb48c
Picked up some low hanging fruit, all minor typos. Change-Id: I851fd3f5df0a181d9b8e67e6378b6d5ec8a19678
63 lines
2.9 KiB
XML
63 lines
2.9 KiB
XML
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink"
|
|
xml:id="keystone-services">
|
|
<title>Defining Services and API Endpoints</title>
|
|
|
|
<para>The Identity Service also tracks what OpenStack services are
|
|
installed and where to locate them on the network. For each service
|
|
on your OpenStack installation, you must call
|
|
<command>keystone service-create</command> to describe the service
|
|
and <command>keystone endpoint-create</command> to specify the API
|
|
endpoints associated with the service.</para>
|
|
|
|
<para>For now, create a service for the Identity Service itself.
|
|
This will allow you to stop using the authorization token and instead
|
|
use normal authentication when using the <command>keystone</command>
|
|
command in the future.</para>
|
|
|
|
<para>First, create a service entry for the Identity Service.</para>
|
|
|
|
<screen><prompt>#</prompt> <userinput>keystone service-create --name=keystone --type=identity \
|
|
--description="Keystone Identity Service"</userinput>
|
|
<computeroutput>+-------------+----------------------------------+
|
|
| Property | Value |
|
|
+-------------+----------------------------------+
|
|
| description | Keystone Identity Service |
|
|
| id | 15c11a23667e427e91bc31335b45f4bd |
|
|
| name | keystone |
|
|
| type | identity |
|
|
+-------------+----------------------------------+</computeroutput></screen>
|
|
|
|
<para>The service id is randomly generated, and will be different
|
|
from the one shown above when you run the command. Next, specify
|
|
an API endpoint for the Identity Service using the service id you
|
|
received. When you specify an endpoint, you provide three URLs
|
|
for the public API, the internal API, and the admin API. In this
|
|
guide, we use the hostname <literal>controller</literal>. Note
|
|
that the Identity Service uses a different port for the admin
|
|
API.</para>
|
|
|
|
<screen><prompt>#</prompt> <userinput>keystone endpoint-create \
|
|
--service-id=15c11a23667e427e91bc31335b45f4bd \
|
|
--publicurl=http://controller:5000/v2.0 \
|
|
--internalurl=http://controller:5000/v2.0 \
|
|
--adminurl=http://controller:35357/v2.0</userinput>
|
|
<computeroutput>+-------------+-----------------------------------+
|
|
| Property | Value |
|
|
+-------------+-----------------------------------+
|
|
| adminurl | http://controller:35357/v2.0 |
|
|
| id | 11f9c625a3b94a3f8e66bf4e5de2679f |
|
|
| internalurl | http://controller:5000/v2.0 |
|
|
| publicurl | http://controller:5000/v2.0 |
|
|
| region | regionOne |
|
|
| service_id | 15c11a23667e427e91bc31335b45f4bd |
|
|
+-------------+-----------------------------------+
|
|
</computeroutput>
|
|
</screen>
|
|
|
|
<para>As you add other services to your OpenStack installation, you
|
|
will call these commands again to register those services with the
|
|
Identity Service.</para>
|
|
|
|
</section>
|