Keystone is responsible for user authentication and authorizing access to the OpenStack components if the authenticated user has the appropriate permissions. In this section, we will configure Keystone to use MariaDB database as a local user accounts directory, so Keystone stores user accounts information on the database.
Before you configure Keystone, we need to prepare the database for Keystone to use, configure its user permissions, and open the needed firewall ports so that other nodes would be able to communicate with it. Keystone is usually installed on the controller node as part of OpenStack's control plane.
[root@controller ~]# mysql -u root -p
Create a database named
MariaDB [(none)]> CREATE DATABASE keystone;