3.5. Create an Administrator Account and the Identity Service Endpoint

Procedure 3.9. Creating an Administrator Account and the Identity Service Endpoint

1. Create an admin user, role, and tenant:

   # keystone-manage bootstrap \
   --bootstrap-password PASSWORD \
   --bootstrap-username admin \
   --bootstrap-project-name admin \
   --bootstrap-role-name admin \
   --bootstrap-service-name keystone \
   --bootstrap-region-id RegionOne \
   --bootstrap-admin-url http://IP:35357 \
   --bootstrap-public-url http://IP:5000 \
   --bootstrap-internal-url http://IP:5000

   Replace PASSWORD with the password of the admin user, and replace IP with the IP address or host name of the Identity server.
2. The newly-created admin account will be used for future management of the Identity service. To facilitate authentication, create a keystonerc_admin file in a secure location such as the home directory of the root user.
   Add these lines to the file to set the environment variables that will be used for authentication:

   export OS_USERNAME=admin
   export OS_PROJECT_NAME=admin
   export OS_PASSWORD=PASSWORD
   export OS_AUTH_URL=http://IP:35357/v2.0/
   export PS1='[\u@\h \W(keystone_admin)]\$ '

   Again, replace PASSWORD with the password of the admin user, and replace IP with the IP address or host name of the Identity server.
3. Load the environment variables used for authentication:

   # source ~/keystonerc_admin