Keystone is a single-threaded service that can benefit from some tuning and scaling when done properly. To run HAProxy on the same node as the API services, the API services will have to be told not to listen on all IP addresses on the node. Edit your
/etc/keystone/keystone.cfg file and change the
admin_bind_host options from
0.0.0.0 to the internal IP address of the node. If these are commented out, just uncomment them and set them to the internal IP address of your control node.
Configuration changes from here on made to OpenStack components in configuration files, or in the database, are subject to be overwritten by Packstack with original answer file values if you run Packstack again.