openstack/training-guides
Code Issues Proposed changes

Adds Keystone service tenant

Browse Source 
Keystone service tenant is required by OpenStack services to
authenticate. We could reuse admin tenant for the same but it
will provide OpenStack services with unnecessary privileges.

Implements: blueprint openstack-training-labs
Change-Id: Ia72012a09da36df5f52454c289775a8b050f9e1a
This commit is contained in:
Pranav Salunke 2014-08-08 10:21:23 +05:30 committed by Roger Luethi
parent 8aab6f82de
commit e0d970e40d
2 changed files with 13 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
labs/config/credentials
View File

@ -23,4 +23,12 @@
: ${ADMIN_USER_NAME:=admin}
: ${ADMIN_PASSWORD:=admin_pass}
# OpenStack Services needs to be affiliated with a tenant to provide
# authentication to other OpenStack services. We create a "service" tenant for
# the OpenStack services. All the OpenStack services will be registered via
# service tenant.
# Tenant and role for service accounts.
: ${SERVICE_TENANT_NAME:=service}
# vim: set ai ts=4 sw=4 et ft=sh:

5
labs/scripts/setup_keystone.sh
View File

@ -84,3 +84,8 @@ keystone endpoint-create \
--publicurl "http://controller-api:5000/v2.0" \
--adminurl "http://controller-mgmt:35357/v2.0" \
--internalurl "http://controller-mgmt:5000/v2.0"
echo "Adding service tenant."
keystone tenant-create \
--name "$SERVICE_TENANT_NAME" \
--description "Service Tenant"