mysql数据库创建keystone需要的数据库

最新推荐文章于 2024-02-18 16:33:22 发布

-879

最新推荐文章于 2024-02-18 16:33:22 发布

阅读量296

点赞数

文章标签： mysql 数据库 bootstrap

本文链接：https://blog.csdn.net/A330569/article/details/125307364

版权

本文档详细介绍了如何初始化和配置OpenStack的Keystone服务，包括创建数据库、用户及权限设置，安装相关软件，配置数据库连接，执行数据库同步，设置token提供者，创建管理角色和项目，以及用户管理和权限分配。此外，还提供了验证身份和获取token的步骤。

摘要生成于 C知道，由 DeepSeek-R1 满血版支持，前往体验 >

mysql -uroot -p123456
   CREATE DATABASE keystone; 创建keystone数据库
   GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456'; 创建keystone用户密码123456 赋予keystone访问表的权限从任意机器登录
   exit 退出
yum install openstack-keystone httpd mod_wsgi -y
vim /etc/keystone/keystone.conf
[database]
connection = mysql+pymysql://keystone:123456@controller/keystone
[token]
provider = fernet
su -s /bin/sh -c "keystone-manage db_sync" keystone
keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

keystone-manage bootstrap --bootstrap-password 123456 --bootstrap-admin-url http://controller:5000/v3/ --bootstrap-internal-url http://controller:5000/v3/ --bootstrap-public-url http://controller:5000/v3/ --bootstrap-region-id RegionOne

vim /etc/httpd/conf/httpd.conf
ServerName controller
ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
systemctl enable httpd.service
systemctl start httpd.service
vim admin.sh
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
:wq
chmod a+x admin.sh
openstack domain create --description "An Example Domain" example
openstack project create --domain default --description "Service Project" service
openstack project create --domain default --description "Demo Project" myproject
openstack user create --domain default --password-prompt myuser
openstack role create myrole
openstack role add --project myproject --user myuser myrole

$ unset OS_AUTH_URL OS_PASSWORD
$ openstack --os-auth-url http://controller:5000/v3 --os-project-domain-name Default --os-user-domain-name Default --os-project-name admin --os-username admin token issue
$ openstack --os-auth-url http://controller:5000/v3 --os-project-domain-name Default --os-user-domain-name Default --os-project-name myproject --os-username myuser token issue