The sequence of setting up keystone v3?

Question

I would like to set up keystone V3. After studying the reference from the Internet, some confused me.

This one creates an admin domain to v3 endpoint with default v2 policy.json first and then changes policy.json.

Another one changes policy.json and modifies endpoint to v3 in database first.

Which one should I follow? Thanks.

Answer 1

Both are doing the same thing but as you note, in a different order. The order doesn't matter as long as both the database and policy.json are updated. However you can see from the domains discussion that you may not get all the features in the dashboard for example with Identity v3. You can read more about policy.json in http://docs.openstack.org/admin-guide-cloud/content/identity-service-api-protection-with-role-based-access-control.html.