Comment 1 for bug 1643422

Looks like this is related to keystoneauth [0] and not keystonemiddleware. So, just for clarification, your keystone endpoint in the catalog is not accessible from where the other services are. Instead the other services, specifically keystonemiddleware, must use some internal URL (http://127.0.0.1:5000 and http://127.0.0.1:35357 in your example) because they are not allowed to reach out to other services?

[0] https://github.com/openstack/keystoneauth/blob/b6f8648177f55423e76574db74dc511b0f89702d/keystoneauth1/identity/base.py#L231-L241