[Openstack-operators] : Using keystone to keystone federation
Kanthi P
pavuluri.kanthi at gmail.com
Sun May 17 17:27:48 UTC 2015
I am trying to understand and use the keystone to keystone federation
described here:
https://github.com/openstack/keystone-specs/blob/master/specs/juno/keystone-to-keystone-federation.rst
It is mentioned that we can have one keystone as identity provider and to
that we can add multiple service providers.
Say I have multiple cloud deployments and want to add these as service
providers to that identity provider(keystone)
It is also mentioned that while we add a cloud implementer(openstack cloud
in my case) to an identity provider, we need to add it as a region. So my
query is that in my openstack deployment all the service endpoints should
be created in a region? something like this:
+----------------------------------+-----------+-------------------------------------------+-------------------------------------------+-------------------------------------------+----------------------------------+
| id | region | publicurl
| internalurl |
adminurl | service_id |
+----------------------------------+-----------+-------------------------------------------+-------------------------------------------+-------------------------------------------+----------------------------------+
| 1055a76371bb445e890c4730905a6294 | regionOne |
http://10.10.10.10:9292 | http://10.10.10.10:9292
| http://10.10.10.10:9292 |
0d98f46857a046bb8efeb96c9f79e0a1 |
On Sun, May 17, 2015 at 10:21 AM, Jesse Keating <jlk at bluebox.net> wrote:
> I'm not sure I understand the question. Can you elaborate some more?
>
>
> - jlk
>
> On Sat, May 16, 2015 at 1:12 AM, Kanthi P <pavuluri.kanthi at gmail.com>
> wrote:
>
>> Hi,
>>
>> I want to have multiple cloud service providers(of openstack) and a 3rd
>> party identity provider, keystone in my deployment.
>> So essentially the endpoints of openstack, including keystone service
>> with in each SP be created in a unique 'region' in the CSP deployment?
>>
>> Thanks
>>
>>
>> _______________________________________________
>> OpenStack-operators mailing list
>> OpenStack-operators at lists.openstack.org
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>>
>>
>
> _______________________________________________
> OpenStack-operators mailing list
> OpenStack-operators at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-operators
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20150517/6baf080b/attachment.html>
More information about the OpenStack-operators
mailing list