3.6. Create the Identity Service Endpoint

Procedure 3.10. Creating the Identity Service Endpoint

1. Set up the shell to access Keystone as the admin user:

   # source ~/keystonerc_admin

   Copy to Clipboard Toggle word wrap
2. Set the OS_SERVICE_TOKEN environment variable to the administration token. This is done by reading the token file created when setting the administration token:

   [(keystone_admin)]# export OS_SERVICE_TOKEN=`cat ~/ks_admin_token`

   Copy to Clipboard Toggle word wrap
3. Set the OS_SERVICE_ENDPOINT environment variable to point to the server hosting the Identity service:

   [(keystone_admin]# export OS_SERVICE_ENDPOINT='http://IP:35357/v2.0'

   Copy to Clipboard Toggle word wrap
   Replace IP with the IP address or host name of the Identity server.
4. Create a service entry for the Identity service:

   [(keystone_admin)]# keystone service-create --name=keystone --type=identity \
      --description="Keystone Identity service"
   +-------------+----------------------------------+
   |   Property  |              Value               |
   +-------------+----------------------------------+
   | description |     Keystone Identity service    |
   | enabled     |               True               |
   | id          | a8bff1db381f4751bd8ac126464511ae |
   | name        |             keystone             |
   | type        |             identity             |
   +-------------+----------------------------------+

   Copy to Clipboard Toggle word wrap
5. Create an endpoint entry for the v2.0 API Identity service:

   [(keystone_admin)]# keystone endpoint-create \
      --service keystone \
      --publicurl 'https://IP:443/v2.0' \
      --adminurl 'https://IP:443/v2.0' \
      --internalurl 'https://IP:5000/v2.0' \
      --region 'RegionOne'
   +-------------+----------------------------------+
   |   Property  |              Value               |
   +-------------+----------------------------------+
   | adminurl    |       https://IP:443/keystone/admin       |
   | id          | 1295011fdc874a838f702518e95a0e13 |
   | internalurl |       https://IP:5000/v2.0        |
   | publicurl   |       https://IP:443/keystone/main        |
   | region      |             RegionOne            |
   | service_id  |                 ID               |
   +-------------+----------------------------------+

   Copy to Clipboard Toggle word wrap
   Replace IP with the IP address or host name of the Identity server.

   Note

   By default, the endpoint is created in the default region, RegionOne. If you need to specify a different region when creating an endpoint, use the --region argument.