三、安装Keystone服务【VMware虚拟机搭建Openstack+Ironic】

三、安装Keystone服务【VMware虚拟机搭建Openstack+Ironic】

基本说明

keystone提供openstack的身份认证服务，用于身份认证，授权，服务目录等。仅需要安装在控制节点。

controller节点

数据库操作

1. 进入数据库

mysql -uroot -p123456

2. 创建keystone数据库

CREATE DATABASE keystone default character set utf8;

3. 创建用户并授权

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY '123456';

安装配置keystone组件

1. 安装软件

yum -y install openstack-keystone httpd mod_wsgi

2.备份原配置文件，并复制配置文件且删除注释

cd /etc/keystone/ && mv keystone.conf keystone.conf.source && cat keystone.conf.source |grep -Ev "^#|^$" > keystone.conf && chown root:keystone keystone.conf

3.修改配置文件

vim /etc/keystone/keystone.conf

[database]
connection = mysql+pymysql://keystone:123456@controller/keystone

[token]
provider = fernet

4. 同步数据库

su -s /bin/sh -c "keystone-manage db_sync" keystone

5. 初始化fernet秘钥

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

6. 启动身份认证服务

keystone-manage bootstrap --bootstrap-password 123456 \
--bootstrap-admin-url http://controller:5000/v3/ \
--bootstrap-internal-url http://controller:5000/v3/ \
--bootstrap-public-url http://controller:5000/v3/ \
--bootstrap-region-id RegionOne

配置Apache HTTP服务

1. 修改httpd配置文件

vim /etc/httpd/conf/httpd.conf

2. 在96行添加

ServerName controller:80

3. 创建软链接

ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

4. 启动服务并设置开机启动

systemctl enable httpd.service
systemctl start httpd.service

配置环境变量并创建service租户

1. 创建环境变量文件

vim /root/source-admin.sh

export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

2. 激活环境变量

 source /root/source-admin.sh

3. 创建租户（项目），项目名为service 并查看

openstack project create --domain default  --description "Service Project" service

openstack project list

4. 验证keystone

openstack token issue

4. 查看keystone服务列表

 openstack catalog list