root@987869375db8:~# openstack endpoint list --service identity
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+
| ID                               | Region    | Service Name | Service Type | Enabled | Interface | URL                            |
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+
| 4c12ffe107ef4ed39c3e0dfdfe1cfbcc | RegionOne | keystone     | identity     | True    | internal  | http://192.168.0.98:5000/v2.0  |
| a5d3762f0e334e9186989efc946a0979 | RegionOne | keystone     | identity     | True    | public    | http://172.16.0.98:5000/v2.0   |
| abac6f6c1de642659b91b9d7da968955 | RegionOne | keystone     | identity     | True    | admin     | http://192.168.0.98:35357/v2.0 |
+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+


=================> Let's try if we have connectivity to the ADMIN endpoint...

root@987869375db8:~# ping -c 1 192.168.0.98
PING 192.168.0.98 (192.168.0.98) 56(84) bytes of data.

--- 192.168.0.98 ping statistics ---
1 packets transmitted, 0 received, 100% packet loss, time 0ms




root@987869375db8:~# ping -c 1 172.16.0.98
PING 172.16.0.98 (172.16.0.98) 56(84) bytes of data.
64 bytes from 172.16.0.98: icmp_seq=1 ttl=63 time=0.364 ms

--- 172.16.0.98 ping statistics ---
1 packets transmitted, 1 received, 0% packet loss, time 0ms
rtt min/avg/max/mdev = 0.364/0.364/0.364/0.000 ms




=================> so, only connectivity to PUBLIC URL... Let's try openstack commands for tenants/users


root@987869375db8:~# openstack user list
+----------------------------------+-----------------------------------------------+
| ID                               | Name                                          |
+----------------------------------+-----------------------------------------------+
| 1127b8be38dd4789aba89c510ac05360 | neutron                                       |
| 1151b22ec30c4575ad8ff2388468f759 | glance                                        |
| 25070844407b4acfba1e108c9bfe79c7 | heat                                          |
| 3065b7031c09471a92da1198780a442b | tempest                                       |
| 3ff6b20ae11e436bae8e5a8745120f15 | help                                          |
| 6ef4d5e59ac34090951d1a003e9ef476 | swift                                         |
| 83625b24038c4c0a9ad305321f93659e | heat-cfn                                      |
| 886748363cc94b39a51d90ee6a50aba3 | glare                                         |
| 9b9f672de12a4067bcda5095f731c571 | admin                                         |
| b650ae149c10470a9fc224106d350ba6 | heat_admin                                    |
| c1eb114abf4049b4a38496ba8fc9ec93 | nova                                          |
| cf9b245ac8004d1ea8d34590be70385a | fuel_stats_user                               |
| cfc005f29d4246d284248b65d514ab79 | cinder                                        |
+----------------------------------+-----------------------------------------------+
root@987869375db8:~# openstack project list
+----------------------------------+-----------------------------------------------+
| ID                               | Name                                          |
+----------------------------------+-----------------------------------------------+
| 500eb9509d0042b3b4f0be3fa5f4e816 | services                                      |
| 709237a019fd4b76a6d80a5cb1e27d6b | admin                                         |
+----------------------------------+-----------------------------------------------+



root@987869375db8:~# openstack project create test
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | default                          |
| enabled     | True                             |
| id          | 8b86bd17135e4d6fa3da02d8c4bce313 |
| is_domain   | False                            |
| name        | test                             |
| parent_id   | default                          |
+-------------+----------------------------------+


root@987869375db8:~# openstack user create test_user --project test
No password was supplied, authentication will fail when a user does not have a password.
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | 8b86bd17135e4d6fa3da02d8c4bce313 |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | e01fb25ce9764ce5a44dec77a60751ef |
| name                | test_user                        |
| password_expires_at | None                             |
+---------------------+----------------------------------+




=================> It works! Let' see how the credentials are set up:

root@987869375db8:~# cat $creds
#!/bin/sh
export OS_NO_CACHE='true'
export OS_TENANT_NAME='admin'
export OS_PROJECT_NAME='admin'
export OS_USERNAME='admin'
export OS_PASSWORD='admin'
export OS_AUTH_URL='http://172.16.0.98:5000/v3'
export OS_IDENTITY_API_VERSION=3
export OS_DEFAULT_DOMAIN='default'
export OS_USER_DOMAIN_NAME='Default'
export OS_PROJECT_DOMAIN_NAME='Default'
export OS_AUTH_STRATEGY='keystone'
export OS_REGION_NAME='RegionOne'
export CINDER_ENDPOINT_TYPE='publicURL'
export GLANCE_ENDPOINT_TYPE='publicURL'
export KEYSTONE_ENDPOINT_TYPE='publicURL'
export NOVA_ENDPOINT_TYPE='publicURL'
export NEUTRON_ENDPOINT_TYPE='publicURL'
export OS_ENDPOINT_TYPE='publicURL'
export MURANO_REPO_URL='http://storage.apps.openstack.org/'
export MURANO_PACKAGES_SERVICE='glance'
export OS_INTERFACE='public'             <============= this is key, otherwise it doesn't work....