openstack/openstack-manuals
Code Issues Proposed changes

Drop use port 35357

Browse Source 
With Keystone v3, the admin (35357) and public (5000) ports are
the same and use the same keystone code paths for authentication.

This patch set drops 35357 and only uses port 5000.

Change-Id: Ie16998d73221259aeb14583445331561f425573e
This commit is contained in:
Nguyen Van Duc 2018-07-19 10:54:31 +07:00 committed by Duc Nguyen
parent 758dbd02e3
commit a359d5a71a
3 changed files with 3 additions and 13 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/ha-guide/source/controller-ha-haproxy.rst
View File

@ -98,17 +98,7 @@ Configuring HAProxy
server controller2 10.0.0.13:9191 check inter 2000 rise 2 fall 5
server controller3 10.0.0.14:9191 check inter 2000 rise 2 fall 5
listen keystone_admin_cluster
bind <Virtual IP>:35357
balance source
option tcpka
option httpchk
option tcplog
server controller1 10.0.0.12:35357 check inter 2000 rise 2 fall 5
server controller2 10.0.0.13:35357 check inter 2000 rise 2 fall 5
server controller3 10.0.0.14:35357 check inter 2000 rise 2 fall 5
listen keystone_public_internal_cluster
listen keystone_admin_public_internal_cluster
bind <Virtual IP>:5000
balance source
option tcpka

2
doc/ha-guide/source/storage-ha-block.rst
View File

@ -122,7 +122,7 @@ Edit the ``/etc/cinder/cinder.conf`` file. For example, on a RHEL-based system:
[keystone_authtoken]
# 10.0.0.11 is the Keystone VIP
identity_uri = http://10.0.0.11:35357/
identity_uri = http://10.0.0.11:5000/
www_authenticate_uri = http://10.0.0.11:5000/
admin_tenant_name = service
admin_user = cinder

2
doc/install-guide/source/firewalls-default-ports.rst
View File

@ -47,7 +47,7 @@ ports that each OpenStack service uses:
- 8386
- publicurl and adminurl
* - Identity service (``keystone``) administrative endpoint
- 35357
- 5000
- adminurl
* - Identity service public endpoint
- 5000