keystone的基础操作

keystone的基础操作

keystone 为所有的openstack服务提供认证服务,这个认证服务使用domains,projects,users,roles的组合。

• 创建一个名为launcher的domain

 [root@master ~]# openstack domain create --description "launcher domain" launcher
 +-------------+----------------------------------+
 | Field       | Value                            |
 +-------------+----------------------------------+
 | description | launcher domain                  |
 | enabled     | True                             |
 | id          | d5b7fc9f069a4d67a2317b042ba8130e |
 | name        | launcher                         |
 | tags        | []                               |
 +-------------+----------------------------------+

• 列举所有的domain

 [root@master ~]# openstack domain list
+----------------------------------+----------+---------+--------------------+
| ID                               | Name     | Enabled | Description        |
+----------------------------------+----------+---------+--------------------+
| 1434fbfb971a4574bb149604bbdee636 | example  | True    | An Example Domain  |
| d5b7fc9f069a4d67a2317b042ba8130e | launcher | True    | launcher domain    |
| default                          | Default  | True    | The default domain |
+----------------------------------+----------+---------+--------------------+

• 在刚刚创建的domain launcher中创建名为cloud的project

[root@master ~]# openstack domain create --description "launcher domain" launcher
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | launcher domain                  |
| enabled     | True                             |
| id          | d5b7fc9f069a4d67a2317b042ba8130e |
| name        | launcher                         |
| tags        | []                               |
+-------------+----------------------------------+

• 创建名字为vic的用户

[root@master ~]# openstack user create --domain launcher --password-prompt vic
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | d5b7fc9f069a4d67a2317b042ba8130e |
| enabled             | True                             |
| id                  | 4a4d615e7f4b45729da0072496ce7c16 |
| name                | vic                              |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

• 创建名为dev的role

[root@master ~]# openstack role create dev
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | None                             |
| id        | 8d7db8a3b42f4995a20f69c47c80bffe |
| name      | dev                              |
+-----------+----------------------------------+

• 将dev与cloud和vic所绑定

$ openstack role add --project cloud --user vic dev

tip: 此命令无输出

• 获取token

[root@master ~]# openstack --os-auth-url http://keystone:5000/v3 \
>   --os-project-domain-name launcher --os-user-domain-name launcher \
>   --os-project-name cloud --os-username vic token issue
+------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| Field      | Value                                                                                                                                                                                   |
+------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+
| expires    | 2019-08-16T10:03:30+0000                                                                                                                                                                |
| id         | gAAAAABdVnFixV_vGLP53PPVtBFX6y3Kft5S0qf0gU1RmXRa8iGyXmAOasSY4qmAJUoytOjkGj6v-XCfg5qOkwnq2KkCGra_Y8VfrYgxXPokM8Sqg5CPCA2akgMT2jPQDua-8IbucPO1zcYJvXTYhVlkLW2BWf6uR88CzoPYhHDPjHBcsTLI3h0 |
| project_id | f88474b3227b455fb3a4e396c94c7395                                                                                                                                                        |
| user_id    | 4a4d615e7f4b45729da0072496ce7c16                                                                                                                                                        |
+------------+-----------------------------------------------------------------------------------------------------------------------------------------------------------------------------------------+