Keystone is, more or less, the glue that ties OpenStack together. It's required for any of the individual services to be installed and function together. Fortunately for us, keystone is basically just a REST API, so it's very easy to make redundant and there isn't a whole lot to it. We'll start by installing keystone and the python mysql client on all three controller nodes: apt-get install keystone python-mysqldb Once that's done, we need a base configuration for keystone. There are a lot of default options installed in the config file, but we really only care (for now) about giving it an admin token, and connecting it to our DB and Message queue. Also, because we're colocating our load balancers on the controller nodes (something which clearly wouldn't be done in production), we're going to shift the ports that keystone is binding to so the real ports are available to HAProxy. (The default ports are being incremented by 10000 for this.) Everything else will be left at its default value.
