Keystone guide deprecated?

[PepeluDev]

Hi,

I have been working for 2 days in a keystone installation in order to use it with the PEP proxy. Some commands on the guide seems to be deprecated, for example:

sudo yum install -y https://repos.fedorapeople.org/repos/openstack/openstack-icehouse/rdo-release-icehouse-4.noarch.rpm

This command is not working cause, Openstack icehouse is deprecated. It would be good if you could point me another way to have the proper keystone installation in order to work with the PEP proxy.

Which version are you currently using? Does it only works with CentOS?

Thank you so much,

José Luis

[AlvaroVega]

Maybe you can try con liberty version instead of icehouse: https://repos.fedorapeople.org/openstack/EOL/openstack-liberty/rdo-release-liberty-5.noarch.rpm

[PepeluDev]

@AlvaroVega Thank you so much for your quick response. And about the CentOS version? It is ok to use CentOS 7? I am settign a VM for the Keystone deployment.

[AlvaroVega]

Yes, Centos7 is needed.

[PepeluDev]

Thanks again @AlvaroVega i am having one more issue. When runnign:
sudo yum install -y openstack-utils openstack-keystone python-keystoneclient mysql-server

It is returning:

http://mirror.centos.org/centos/7/cloud/x86_64/openstack-liberty/repodata/repomd.xml: [Errno 14] HTTP Error 404 - Not Found
It is also trying other mirrors but it doesn't work. Do you know if i have to install any other repositories?

Thanks

[PepeluDev]

I have manage to install openstack-keystone and the other services using the commad that returned an error. What have i done? Preciously, I installed the openstack Queens repo, this one seems not to be deprecated and is working:

sudo yum install -y https://repos.fedorapeople.org/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm

after that:
sudo yum install -y openstack-utils openstack-keystone python-keystoneclient mysql-server

The keystone-manage version installed is 13.0.0. Nevertheless, i do not know if this version suits the deployment we want to get. In fact, the command:

sudo keystone-manage pki_setup --keystone-user keystone --keystone-group keystone

Is not qorking, it seems like command pki_setup have been deprecated in newer versions. Do you think this verion is still good to work with the PEP proxy?

Thanks,

[AlvaroVega]

AFAIK keystone-manage pki_setup is working even in mitaka version. Probably is just a deprecation warning but still works, isn't it?

[PepeluDev]

I don't really know.. The command:

sudo keystone-manage pki_setup --keystone-user keystone --keystone-group keystone

returns:
[centos@keystone-queens ~]$ sudo keystone-manage pki_setup --keystone-user keystone --keystone-group keystone usage: keystone-manage [bootstrap|credential_migrate|credential_rotate|credential_setup|db_sync|db_version|doctor|domain_config_upload|fernet_rotate|fernet_setup|mapping_populate|mapping_purge|mapping_engine|saml_idp_metadata|token_flush] keystone-manage: error: argument command: invalid choice: 'pki_setup' (choose from 'bootstrap', 'credential_migrate', 'credential_rotate', 'credential_setup', 'db_sync', 'db_version', 'doctor', 'domain_config_upload', 'fernet_rotate', 'fernet_setup', 'mapping_populate', 'mapping_purge', 'mapping_engine', 'saml_idp_metadata', 'token_flush')

And actually, if i run:

keystone-manage --help | grep pki_setup

It shows nothing, at least in my case... I will keep searching