openstack/openstack-manuals
Code Issues Proposed changes

Update identity service management for keystone-all deprecation

Browse Source 
Using keystone-all to start the Identity service is deprecated in
favor of the keystone WSGI services.

Change-Id: Ia71a0d01816f3f7354c508fc4fd7c9a0cfe4f5ad
This commit is contained in:
Brant Knudson 2015-03-29 11:37:13 -05:00
parent 8e892da2bf
commit 101da047d5
1 changed files with 13 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
doc/common/section_keystone-concepts-service-management.xml
View File

@ -10,10 +10,12 @@
It consists of:</para>
<itemizedlist>
<listitem>
<para><systemitem class="service">keystone-all</systemitem>.
Starts both the service and administrative APIs in a
single process to provide Catalog, Authorization, and
Authentication services for OpenStack.</para>
<para><systemitem class="service">keystone Web Server Gateway
Interface (WSGI) service</systemitem>. Can be run in a
WSGI-capable web server such as Apache httpd to provide the
Identity Service. The service and administrative APIs are run as
separate instances of the WSGI service.
</para>
</listitem>
<listitem>
<para>Identity Service functions. Each has a pluggable back
@ -21,6 +23,13 @@
service. Most support standard back ends like LDAP or
SQL.</para>
</listitem>
<listitem>
<para><systemitem class="service">keystone-all</systemitem>.
Starts both the service and administrative APIs in a
single process. Using federation with keystone-all is not
supported. keystone-all is deprecated in favor of the WSGI
service.</para>
</listitem>
</itemizedlist>
<para>The Identity Service also maintains a user that
corresponds to each service, such as, a user named