三、安装Keystone服务【VMware虚拟机搭建Openstack+Ironic】
基本说明
keystone提供openstack的身份认证服务,用于身份认证,授权,服务目录等。仅需要安装在控制节点。
controller节点
数据库操作
1. 进入数据库
mysql -uroot -p123456
2. 创建keystone数据库
CREATE DATABASE keystone default character set utf8;
3. 创建用户并授权
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456';
安装配置keystone组件
1. 安装软件
yum -y install openstack-keystone httpd mod_wsgi
2.备份原配置文件,并复制配置文件且删除注释
cd /etc/keystone/ && mv keystone.conf keystone.conf.source && cat keystone.conf.source |grep -Ev "^#|^$" > keystone.conf && chown root:keystone keystone.conf
3.修改配置文件
vim /etc/keystone/keystone.conf
[database]
connection = mysql+pymysql://keystone:123456@controller/keystone
[token]
provider = fernet
4. 同步数据库
su -s /bin/sh -c "keystone-manage db_sync" keystone
5. 初始化fernet秘钥
keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
6. 启动身份认证服务
keystone-manage bootstrap --bootstrap-password 123456 \
--bootstrap-admin-url http://controller:5000/v3/ \
--bootstrap-internal-url http://controller:5000/v3/ \
--bootstrap-public-url http://controller:5000/v3/ \
--bootstrap-region-id RegionOne
配置Apache HTTP服务
1. 修改httpd配置文件
vim /etc/httpd/conf/httpd.conf
2. 在96行添加
ServerName controller:80
3. 创建软链接
ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
4. 启动服务并设置开机启动
systemctl enable httpd.service
systemctl start httpd.service
配置环境变量并创建service租户
1. 创建环境变量文件
vim /root/source-admin.sh
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
2. 激活环境变量
source /root/source-admin.sh
3. 创建租户(项目),项目名为service 并查看
openstack project create --domain default --description "Service Project" service
openstack project list
4. 验证keystone
openstack token issue
4. 查看keystone服务列表
openstack catalog list