Upgrade Keystone

  1. Remove Keystone from Pacemaker's control:

     pcs resource unmanage keystone-clone

  2. Stop the keystone service by running the following on each of your controllers:

     systemctl stop openstack-keystone

  3. Upgrade the relevant packages:

     yum upgrade 'openstack-keystone*' 'python-keystone*'

  4. Reload systemd to account for updated unit files:

     systemctl daemon-reload

  5. Correct the Keystone configuration

  6. Update the Keystone database schema

  7. Restart the service by running the following on each of your controllers:

     systemctl start openstack-keystone

  8. Return the resource to Pacemaker control:

     pcs resource manage keystone-clone

  9. Wait until the output of pcs status shows that the above resources are running.