...
- Run puppet with the ocata modules/tags
- Run apt-get dist-upgrade
- If it fails, verify that /etc/mysql/my.cnf.fallback exists. If it doesnt, create it with the content "!includedir /etc/mysql/conf.d/"
- Keystone often have to be reinstalled; so "apt-get purge keystone" followed by a puppet-run fixes a lot
- Run puppet again
- Perform the DB sync
- keystone-manage db_sync
- Restart keystone services
...