Keystone 服务运维
在使用命令时需要生效环境变量
命令是：
[root@controller ~]# source /etc/xiandian/openrc.sh
[root@controller ~]# source /etc/keystone/admin-openrc.sh
一、用户
可以用 --help 查看相关命令，例如，查看有关用户的命令。
[root@controller ~]# openstack user --help
Command "user" matches:
user create
user delete
user list
user password set
user set
user show
创建一个名称为“aaa”账户，密码为“dddddd”。
命令如下：
[root@controller ~]# openstack user create --password 000000 --domain demo aaa
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 42f8d80362b44356ba01b8386ce4786c |
| enabled | True |
| id | 3cb065c4d01641f18e16d53276e58b50 |
| name | aaa |
+-----------+----------------------------------+
删除一个名为aaa的账户
[root@controller ~]# openstack user delete aaa
查看用户列表
[root@controller ~]# openstack user list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 0d707f2f342a48259d223fe99b6399a3 | neutron |
| 1c1c3124782e4e0bb33f7ab5e24ad49a | nova |
| 3cb065c4d01641f18e16d53276e58b50 | aaa |
| 3f5d3257d7134f2cb72424dcd4fd8abb | swift |
| 4044a241e7b04403813e255f30d35a66 | admin |
| a931705c47d74d7f8068fa9608f17a30 | glance |
| cb17ebcfd10d43969c79060514b144a7 | demo |
| cbbd7bef820a4cfa9f4160342b71e916 | cinder |
+----------------------------------+---------+
修改用户信息，改名和密码
[root@controller ~]# openstack user set
usage: openstack user set [-h] [--name <name>] [--project <project>]
[--project-domain <project-domain>]
[--password <password>] [--password-prompt]
[--email <email-address>]
[--description <description>] [--enable | --disable]
<user>
openstack user set: error: too few arguments
[root@controller ~]# openstack user set aaa --name bbb --password 111111
[root@controller ~]# openstack user list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 0d707f2f342a48259d223fe99b6399a3 | neutron |
| 1c1c3124782e4e0bb33f7ab5e24ad49a | nova |
| 3cb065c4d01641f18e16d53276e58b50 | bbb |
| 3f5d3257d7134f2cb72424dcd4fd8abb | swift |
| 4044a241e7b04403813e255f30d35a66 | admin |
| a931705c47d74d7f8068fa9608f17a30 | glance |
| cb17ebcfd10d43969c79060514b144a7 | demo |
| cbbd7bef820a4cfa9f4160342b71e916 | cinder |
+----------------------------------+---------+
显示用户详细信息
[root@controller ~]# openstack user show bbb
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | 42f8d80362b44356ba01b8386ce4786c |
| enabled | True |
| id | 3cb065c4d01641f18e16d53276e58b50 |
| name | bbb |
+-----------+----------------------------------+
二、项目
[root@controller ~]# openstack project --help
Command "project" matches:
project create
project delete
project list
project set
project show
创建项目
[root@controller ~]# openstack project create --domain demo ggg
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | |
| domain_id | 42f8d80362b44356ba01b8386ce4786c |
| enabled | True |
| id | 9ca1069ee45f4adc81d609ec0f2cab20 |
| is_domain | False |
| name | ggg |
| parent_id | 42f8d80362b44356ba01b8386ce4786c |
+-------------+----------------------------------+
查看
[root@controller ~]# openstack project list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 76f2a1c1b32e4547947ea9e51d04b0fe | bbb |
| 9ca1069ee45f4adc81d609ec0f2cab20 | ggg |
| b0c4dea405ee4f659979866cf9a1d034 | service |
| b4d19b6a0ce54bfaa8d64f171bc14e50 | demo |
| c852297c681c4ba9afe144de7f4b9802 | admin |
+----------------------------------+---------+
删除项目
[root@controller ~]# openstack project delete ggg
[root@controller ~]# openstack project list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 76f2a1c1b32e4547947ea9e51d04b0fe | bbb |
| b0c4dea405ee4f659979866cf9a1d034 | service |
| b4d19b6a0ce54bfaa8d64f171bc14e50 | demo |
| c852297c681c4ba9afe144de7f4b9802 | admin |
+----------------------------------+---------+
查看详细信息
[root@controller ~]# openstack project show bbb
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | |
| domain_id | 42f8d80362b44356ba01b8386ce4786c |
| enabled | True |
| id | 76f2a1c1b32e4547947ea9e51d04b0fe |
| is_domain | False |
| name | bbb |
| parent_id | 42f8d80362b44356ba01b8386ce4786c |
+-------------+----------------------------------+
三、角色
查看role的命令
[root@controller ~]# openstack role --help
Command "role" matches:
role add
role assignment list
role create
role delete
role list
role remove
role set
role show
创建角色
[root@controller ~]# openstack role create fff
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | None |
| id | 0feaebe7439a4d918746601dc2dbd7ff |
| name | fff |
+-----------+----------------------------------+
删除角色
[root@controller ~]# openstack role delete fff
查看角色信息
[root@controller ~]# openstack role list
+----------------------------------+-------+
| ID | Name |
+----------------------------------+-------+
| a97ae75f7b4c43c6827d06c897223ed9 | user |
| ad0914c1f68b41a7bfecb923a2e1496e | admin |
| c1d2981277b04893a253d6f8d436780a | ccc |
+----------------------------------+-------+
查看指定角色的详细信息
[root@controller ~]# openstack role show ccc
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | None |
| id | c1d2981277b04893a253d6f8d436780a |
| name | ccc |
+-----------+----------------------------------+
绑定用户和项目权限
首先确定用户，项目，角色都在
[root@controller ~]# openstack user list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 0d707f2f342a48259d223fe99b6399a3 | neutron |
| 1c1c3124782e4e0bb33f7ab5e24ad49a | nova |
| 3cb065c4d01641f18e16d53276e58b50 | bbb |
| 3f5d3257d7134f2cb72424dcd4fd8abb | swift |
| 4044a241e7b04403813e255f30d35a66 | admin |
| a931705c47d74d7f8068fa9608f17a30 | glance |
| cb17ebcfd10d43969c79060514b144a7 | demo |
| cbbd7bef820a4cfa9f4160342b71e916 | cinder |
+----------------------------------+---------+
[root@controller ~]# openstack project list
+----------------------------------+---------+
| ID | Name |
+----------------------------------+---------+
| 13900e6294164b718e64aada1e2c2111 | jjj |
| 76f2a1c1b32e4547947ea9e51d04b0fe | bbb |
| b0c4dea405ee4f659979866cf9a1d034 | service |
| b4d19b6a0ce54bfaa8d64f171bc14e50 | demo |
| c852297c681c4ba9afe144de7f4b9802 | admin |
+----------------------------------+---------+
[root@controller ~]# openstack role list
+----------------------------------+-------+
| ID | Name |
+----------------------------------+-------+
| a97ae75f7b4c43c6827d06c897223ed9 | user |
| ad0914c1f68b41a7bfecb923a2e1496e | admin |
| c1d2981277b04893a253d6f8d436780a | ccc |
+----------------------------------+-------+
[root@controller ~]# openstack role add --user bbb --project bbb ccc
删除绑定的用户和项目权限
[root@controller ~]# openstack role remove --user bbb --project bbb ccc
四、端点地址查询
通过命令可以查询平台中所有
服务所使用的端点地址信息，
[root@controller ~]# openstack endpoint list
+------------+-----------+--------------+--------------+---------+-----------+--------------+
| ID | Region | Service Name | Service Type | Enabled | Interface | URL |
+------------+-----------+--------------+--------------+---------+-----------+--------------+
| 09ed2c35b8 | RegionOne | keystone | identity | True | public | http://contr |
| 224e188c9b | | | | | | oller:5000/v |
| 2ca7c5fb51 | | | | | | 3 |
| ee | | | | | | |
| 0ec094f07a | RegionOne | cinderv2 | volumev2 | True | internal | http://contr |
| f943e5a7d4 | | | | | | oller:8776/v |
| 9e90843064 | | | | | | 2/%(tenant_i |
| 7f | | | | | | d)s |
| 0f8df50fa4 | RegionOne | nova | compute | True | public | http://contr |
| 0a4b41a93d | | | | | | oller:8774/v |
| 2d1cd574aa | | | | | | 2.1/%(tenant |
| 4d | | | | | | _id)s |
| 2edf36a396 | RegionOne | keystone | identity | True | internal | http://contr |
| bc4e239078 | | | | | | oller:5000/v |
| 12a6256d03 | | | | | | 3 |
| 67 | | | | | | |
| 305fcddc56 | RegionOne | neutron | network | True | public | http://contr |
| 594a4393ad | | | | | | oller:9696 |
| b40dbd99fd | | | | | | |
| 75 | | | | | | |
| 329a5abe39 | RegionOne | swift | object-store | True | admin | http://contr |
| 2c4e45aab8 | | | | | | oller:8080/v |
| af4c817e62 | | | | | | 1 |
| af | | | | | | |
| 3e37682f8a | RegionOne | nova | compute | True | internal | http://contr |
| 904e1ca3f6 | | | | | | oller:8774/v |
| 74f09a33bc | | | | | | 2.1/%(tenant |
| c0 | | | | | | _id)s |
| 415855e8fd | RegionOne | cinderv2 | volumev2 | True | public | http://contr |
| a34b61937a | | | | | | oller:8776/v |
| 506bc8d758 | | | | | | 2/%(tenant_i |
| 73 | | | | | | d)s |
| 4edc9e3b24 | RegionOne | cinder | volume | True | admin | http://contr |
| f74bdbb0d4 | | | | | | oller:8776/v |
| f5baaea349 | | | | | | 1/%(tenant_i |
| e3 | | | | | | d)s |
| 5133081f5d | RegionOne | neutron | network | True | internal | http://contr |
| 1c474d9b1f | | | | | | oller:9696 |
| 512f8c71ea | | | | | | |
| f0 | | | | | | |
| 56a0c472c9 | RegionOne | keystone | identity | True | admin | http://contr |
| f04bde8605 | | | | | | oller:35357/ |
| 6ce3cb851c | | | | | | v3 |
| 16 | | | | | | |
| 5f2d6836e9 | RegionOne | glance | image | True | public | http://contr |
| ed4f998c1c | | | | | | oller:9292 |
| e3a3991ba7 | | | | | | |
| 0f | | | | | | |
| 6068cb9e2d | RegionOne | neutron | network | True | admin | http://contr |
| 8e489f95d2 | | | | | | oller:9696 |
| e70ad9e272 | | | | | | |
| 94 | | | | | | |
| 671d5609a5 | RegionOne | nova | compute | True | admin | http://contr |
| 514f7cb46f | | | | | | oller:8774/v |
| 293b1f7b55 | | | | | | 2.1/%(tenant |
| 51 | | | | | | _id)s |
| 723f8358b1 | RegionOne | cinderv2 | volumev2 | True | admin | http://contr |
| 3441b7ba77 | | | | | | oller:8776/v |
| 4fccd48736 | | | | | | 2/%(tenant_i |
| b4 | | | | | | d)s |
| 7bf6b18f97 | RegionOne | cinder | volume | True | internal | http://contr |
| 9c42b3ba0d | | | | | | oller:8776/v |
| 36366e3ef1 | | | | | | 1/%(tenant_i |
| dc | | | | | | d)s |
| a7d92cbc98 | RegionOne | cinder | volume | True | public | http://contr |
| a5497a82ba | | | | | | oller:8776/v |
| 2c22c0b4af | | | | | | 1/%(tenant_i |
| 98 | | | | | | d)s |
| b2c5ca41ba | RegionOne | swift | object-store | True | public | http://contr |
| ca4c758596 | | | | | | oller:8080/v |
| 7df0ce5e17 | | | | | | 1/AUTH_%(ten |
| b4 | | | | | | ant_id)s |
| caffbffb77 | RegionOne | swift | object-store | True | internal | http://contr |
| bf4b0fb49e | | | | | | oller:8080/v |
| e703a1c528 | | | | | | 1/AUTH_%(ten |
| 05 | | | | | | ant_id)s |
| cda9e418db | RegionOne | glance | image | True | internal | http://contr |
| 0b4c4aba21 | | | | | | oller:9292 |
| 3dd7f56324 | | | | | | |
| 7c | | | | | | |
| f14ef27dff | RegionOne | glance | image | True | admin | http://contr |
| 7f46b5853d | | | | | | oller:9292 |
| b22875ef05 | | | | | | |
| fe | | | | | | |
+------------+-----------+--------------+--------------+---------+-----------+--------------+
3126
被折叠的 条评论
为什么被折叠?
到【灌水乐园】发言
