安装keystone-安装第一个服务

最新推荐文章于 2023-11-29 14:30:06 发布

钟明家

最新推荐文章于 2023-11-29 14:30:06 发布

阅读量252

点赞数

本文链接：https://blog.csdn.net/weixin_36888575/article/details/98641037

版权

# yum -y install https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm
# yum -y install https://rdoproject.org/repos/rdo-release.rpm
# yum -y install python-openstackclient
#安装yum-plugin-priorities包，防止高优先级软件被低优先级软件覆盖
# yum install yum-plugin-priorities
#安装EPEL扩展yum源，是一个RHEL系列的高质量软件源，可能版本号会被修改
yum install epel-release

1、安装keystone服务：
# yum install openstack-keystone httpd mod_wsgi
yum install python-openstackclient -y
2、安装openstack辅助包：
# yum -y install openstack-utils

3、编辑配置文件：
# vim /etc/keystone/keystone.conf
[database]
…..
connection = mysql+pymysql://keystone:openpasswd@mariadb/keystone
[token]
# …
provider = fernet
4、初始化数据库：
# su -s /bin/sh -c “keystone-manage db_sync” keystone

测试是否创建成功：

# mysql -ukeystone -popenpasswd -hmariadb keystone
Reading table information for completion of table and column names
You can turn off this feature to get a quicker startup with -A

Welcome to the MariaDB monitor. Commands end with ; or \g.
Your MariaDB connection id is 7
Server version: 5.5.58-MariaDB Source distribution

Type ‘help;’ or ‘\h’ for help. Type ‘\c’ to clear the current input statement.

5、初始化 fernet token密钥库：
# keystone-manage fernet_setup –keystone-user keystone –keystone-group keystone
# keystone-manage credential_setup –keystone-user keystone –keystone-group keystone

6、启动身份服务
在Queens release之前需要单独在35357端口运行管理服务，随着v2 API的移除，keystone可以在同一端口上运行所有接口。
# keystone-manage bootstrap –bootstrap-password openpasswd \
–bootstrap-admin-url http://keystone:5000/v3/ \
–bootstrap-internal-url http://keystone:5000/v3/ \
–bootstrap-public-url http://keystone:5000/v3/ \
–bootstrap-region-id RegionOne
设置自己管理的密码这里为： openpasswd 主机地址为：keystone

7、配置httpd service:
# vim /etc/httpd/conf/httpd.conf
ServerName keystone

8、增加链接把keystoneweb的相关配置文件加入web配置文件。
# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

9、设置web自启动：
# systemctl enable httpd.service
# systemctl start httpd.service

10、配置管理员账号：
$ export OS_USERNAME=admin
$ export OS_PASSWORD=openpasswd
$ export OS_PROJECT_NAME=admin
$ export OS_USER_DOMAIN_NAME=Default
$ export OS_PROJECT_DOMAIN_NAME=Default
$ export OS_AUTH_URL=http://keystone:35357/v3
$ export OS_IDENTITY_API_VERSION=3

# cat ~/.bashrc
# .bashrc

# User specific aliases and functions

alias rm=’rm -i’
alias cp=’cp -i’
alias mv=’mv -i’

# Source global definitions
if [ -f /etc/bashrc ]; then
. /etc/bashrc
fi
export OS_USERNAME=admin
export OS_PASSWORD=openpasswd
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://keystone:35357/v3
export OS_IDENTITY_API_VERSION=3
11、创建domain, projects, users, roles
keystone 为每个openstack 服务提供认证。认证服务包括：domain, projects, users, roles
(1)虽然keystone-manage bootstrap已经存在了默认的域，创建域的正确方式为：
# openstack domain create –description “An Example Domain” zhongmingjia
+————-+———————————-+
| Field | Value |
+————-+———————————-+
| description | An Example Domain |
| enabled | True |
| id | 0b81ad560c5c40ff9ae9aa0069e52ec8 |
| name | zhongmingjia |
| tags | [] |
+————-+———————————-+
(2)创建服务项目：本指南使用一个服务项目，其中包含您添加到环境中的每项服务的唯一用户：
# openstack project create –domain default \
> –description “Service Project” service

+————-+———————————-+
| Field | Value |
+————-+———————————-+
| description | Demo Project |
| domain_id | default |
| enabled | True |
| id | 2c1371f2f9264cd6822b818ce3c723eb |
| is_domain | False |
| name | demo |
| parent_id | default |
| tags | [] |
+————-+———————————-+
Create the demo user:
# openstack user create –domain default \
> –password-prompt demo
User Password:
Repeat User Password:
+———————+———————————-+
| Field | Value |
+———————+———————————-+
| domain_id | default |
| enabled | True |
| id | cc48e64e60ec48b696e7e4c555a755b6 |
| name | demo |
| options | {} |
| password_expires_at | None |
+———————+———————————-+
Create the user role:
# openstack role create user

(2)以管理员用户，请求身份验证令牌：
# openstack –os-auth-url http://keystone:35357/v3 –os-project-domain-name Default –os-user-domain-name Default –os-project-name admin –os-username admin token issue
Password:
+————+—————————————————————————————————————————————————————————————–+
| Field | Value |
+————+—————————————————————————————————————————————————————————————–+
| expires | 2018-04-01T14:55:39+0000 |
| id | gAAAAABawOTbWzD6cOoiCM-SjMd1QvWbX1C2eoCC-aw36hX-PaOUuesMtNa-LVoh2tZiWYRwoM76BCAONhgH7j0ER91WlA-fE2JaNK1gWom1rCFx61Bx4jpIj3L8IePWFiXvtPyQUFnNITPNS2MSSkoIoVmQbW6IoT4HkWIIHvZspwOE4TUFf3M |
| project_id | 8f7fa8dca6f4422f80fe7e3391204051 |
| user_id | 55d3ae5d88d7450fbd4ae36e7823dee9 |
+————+—————————————————————————————————————————————————————————————–+
(3)以普通用户，请求验证令牌
# openstack –os-auth-url http://keystone:5000/v3 \
> –os-project-domain-name Default –os-user-domain-name Default \
> –os-project-name demo –os-username demo token issue
Password:
+————+—————————————————————————————————————————————————————————————–+
| Field | Value |
+————+—————————————————————————————————————————————————————————————–+
| expires | 2018-04-01T14:57:51+0000 |
| id | gAAAAABawOVfhvwV9w3VX4b-1vz4mCEQ0ndipNiziq8thHdOwcUphFQ61O0qyU9IisOTqgM7Rq3eL0k31K7ORppfJuIpGtM3QRZqiArs_ic-CikwLDf4aYqB8GZ_Uh66RfkLgEEsvVGNQhGc9iFyzUFMrfcfhZWkS-_s10vaXv0fyVPt7yK9T5w |
| project_id | 2c1371f2f9264cd6822b818ce3c723eb |
| user_id | cc48e64e60ec48b696e7e4c555a755b6 |
+————+—————————————————————————————————————————————————————————————–+

(1)创建管理员环境变量
# vim ~/.admin_openrc

export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=openpasswd
export OS_AUTH_URL=http://keystone:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

# vim ~/.bashrc
删除开始的环境变量

检查配置：
# . ~/.admin_openrc
# openstack token issue
+————+—————————————————————————————————————————————————————————————–+
| Field | Value |
+————+—————————————————————————————————————————————————————————————–+
| expires | 2018-04-01T15:13:58+0000 |
| id | gAAAAABawOkm__trjLxwzdyYYzd0ERpXlNTvgphWS9bzGb27v0A4w50VgvHGn9JWvcpIRqP-sFhDhi9r5zzkgt3V8YCIREuNVFazvI1FJ705pQAqBZjTup3hDYmeVMlpPf5T6BeEIyJ03fcneaRxh7iQQ4GkZYt46P9E-IRkBuejgd72T9XwPHY |
| project_id | 8f7fa8dca6f4422f80fe7e3391204051 |
| user_id | 55d3ae5d88d7450fbd4ae36e7823dee9 |
+————+—————————————————————————————————————————————————————————————–+

(2)创建用户环境变量
# vim ~/.demo-openrc
export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=cisco
export OS_AUTH_URL=http://keystone:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
# . ~/.demo-openrc
# openstack token issue
+————+—————————————————————————————————————————————————————————————–+
| Field | Value |
+————+—————————————————————————————————————————————————————————————–+
| expires | 2018-04-01T15:16:27+0000 |
| id | gAAAAABawOm7h_o_amCl3uUeTCky-d4vexpeAdTjMgyJNOWMKFZrwwNJeI04Xkt4RnyCu0bikWVkCt2fYF2cILwRmY3aw4Ai0nTwkBuF83rjKmWaZboIrPPyGswHZItzgMYrlZ-dK1MdjLtKFJCMfGJ8CzkkHxqZ9kifaKxqwkfY1cWl3C5cxSU |
| project_id | 2c1371f2f9264cd6822b818ce3c723eb |
| user_id | cc48e64e60ec48b696e7e4c555a755b6 |
+————+—————————————————————————————————————————————————————————————–+

钟明家

关注

0
点赞
踩
0

收藏

觉得还不错? 一键收藏
0
评论
安装keystone-安装第一个服务

# yum -y install https://repos.fedorapeople.org/repos/openstack/openstack-queens/rdo-release-queens-1.noarch.rpm# yum -y install https://rdoproject.org/repos/rdo-release.rpm# yum -y install python-...
复制链接

扫一扫