Configuring Keystone with the MariaDB backend

Keystone is responsible for user authentication and authorizing access to the OpenStack components if the authenticated user has the appropriate permissions. In this section, we will configure Keystone to use MariaDB database as a local user accounts directory, so Keystone stores user accounts information on the database.

Getting ready

Before you configure Keystone, we need to prepare the database for Keystone to use, configure its user permissions, and open the needed firewall ports so that other nodes would be able to communicate with it. Keystone is usually installed on the controller node as part of OpenStack's control plane.

Create Keystone database

To create a database for Keystone, use the MySQL command to access the MariaDB instance. This will ask you to type the password that you selected for MariaDB root user:

[root@controller ~]# mysql -u root -p

Create a database named keystone:

MariaDB [(none)]> CREATE DATABASE keystone;

Create...