keystone database instructions (expanded)

keystone-manage is a particually tempermental beast
Be sure to be precise in the information you feed it, as the delete, disable, and revoke options do not apoear to be functional
Each line consist of the following componants:

Command:keystone-manage

Type: 	tenant user role service endpointTemplates endpoint token credentials

Action: add grant list [delete disable revoke did not work for me]


1.) Start with a clean, dedicated database. It is recommended that you do not share this database with any other applications
Verify that you set the database path properly in your keystone.config file with the sql_connection setting
sqlite comes prefigured for you
If you chose to use a different sql strategy, refer to that application's documentation for instructions on setting up the database and the modifying the sql_connection setting

2.) Add tenants
FORMAT: object=tenant action=add [varchar(255) for tenant] [varchar(255) Description]
	keystone-manage tenant add User_account_alpha I_Drew_a_Blank

3.) Add users
FORMAT: object=user action=add [varchar(255) for user] [varchar(255) for password] [already declared tenant]
	keystone-manage user add Some_body H48sm3cUz I_Drew_a_Blank

4.) Create roles
FORMAT: object=role action=add	[varchar(255) for role]
	keystone-manage role add Administrator

5.) Put users into roles
FORMAT: object=role action=grant [already declared role] [already declared user] [already declared tenant]
	keystone-manage  role grant Administrator Some_body User_account_alpha

6.) Declare services
FORMAT: object=service action=add [varchar(255) for service_name] [varchar(255) for service_type] [varchar(255) for service_description]
	keystone-manage service add swift Object_Storage Open-Stack-Object-Storage
	keystone-manage service add nova-v1-0 Nova_API_v1.0 Open-Stack-Nova-v1.0
	keystone-manage service add nova Nova_API_v1.1 Open-Stack-Nova-v1.1
	keystone-manage service add glance Glance_API Open-Stack-Glance
	keystone-manage service add keystone Keystone_Identity Open-Stack-Keystone

7.) Set endpoint templates
FORMAT: object=endpointTemplates action=add [region] [already declared service] [public URL] [admin URL] [internal URL] [1=enabled/0=disabled] [1=global/0=regional]
	******** If your network more than one region/zone, you must add an endpoint template for each service in each zone
		 If a service does not have an endpoint for a zone, it will be unavailable in that zone ********
				Replace %HOST_IP% with appropriate IP or URL

keystone-manage endpointTemplates add RegionOne swift http://%HOST_IP%:8080 http://%HOST_IP%:8080/ http://%HOST_IP%:8080 1 1
keystone-manage endpointTemplates add RegionOne nova-v1-0 http://%HOST_IP%:8774 http://%HOST_IP%:8774/ http://%HOST_IP%:8774 1 1
keystone-manage endpointTemplates add RegionOne nova http://%HOST_IP%:8774 http://%HOST_IP%:8774 http://%HOST_IP%:8774 1 1
keystone-manage endpointTemplates add RegionOne glance http://%HOST_IP%:9292 http://%HOST_IP%:9292 http://%HOST_IP%:9292 1 1
keystone-manage endpointTemplates add RegionOne keystone http://%HOST_IP%:5000 http://%HOST_IP%:5001 http://%HOST_IP%:5000 1 1

8.) Assign endpoints
FORMAT: object=endpoint action=add [already declared user] [endpoint template number]
	****** If you have multiple users, repeat for each user


	keystone-manage endpoint add Some_body 1
	keystone-manage endpoint add Some_body 2
	keystone-manage endpoint add Some_body 3
	keystone-manage endpoint add Some_body 4
	keystone-manage endpoint add Some_body 5


9.) Set Admin token to be used in your API's
FORMAT: object=token action=add [token id] [already declared user] [already declared tenant] [expiration date]
	keystone-manage token add 999888777666 Some_body User_account_alpha 2015-02-05T00:00

10.) Import credentials
FORMAT: object=credentials action add [already declared service][existing key from appropriate rc;IE novarc][existing secret from appropriate rc][already declared tenant]
	****** To load credentials, you MUST declare a service, set the endpoint template for the zones you wish to use these on, and assign the endpoints

	keystone-manage credentials nova 12ab34cd-ab12-12ab-1234abcd12ab cd34ab12-12ab-34-cd-dcba4321dc43 User_account_alpha