openstack学习笔记六多节点部署之keystone

4532423 · 发表于 2016-7-6 09:08:39

keystone 对用户进行验证，每个组件必须得实用一个用户向keystone进行注册，只有成功了，那么这个组件才能正常工作。所以当我们在创建其他组件的时候，也包括keystone本身，都得为这个组件创建一个用户名和密码

keystone也必须知道这些组件到底在什么地方，比如在那台主机上。

User	住宾馆的人
Credentials	开启房间的钥匙
Authentication	宾馆为了拒绝不必要的人进出宾馆，专门设置的机制，只有拥有钥匙的人才能进出
Token	也是一种钥匙，有点特别
Tenant	宾馆
Service	宾馆可以提供的服务类别，比如，饮食类，娱乐类
Endpoint	具体的一种服务，比如吃烧烤，打羽毛球
Role	VIP 等级，VIP越高，享有越高的权限

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16

1
2
3
4
5
6
7
8
9

1
2
3
4
5
6
7
8

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23

1
2
3
4

[iyunv@h1 ~(keystone_admin)]#  keystone  user-get    hequan             ##查看信息
[iyunv@h1 ~(keystone_admin)]#  keystone  user-delete hequan
[iyunv@h1 ~(keystone_admin)]#  keystone  user-password-update --pass  hequan1 hequan ##密码更新
[iyunv@h1 ~(keystone_admin)]# keystone  user-role-add  --user hequan  --role  _member_  --tenant=http  #划分角色和租户

1
2
3
4
5
6
7
8

1
2
3
4
5
6
7
8
9
10

配置安装keystone

首先创建数据库
使用token登陆keystone
创建服务 endpoint
创建用户
关闭token登陆，使用admin登陆

基本环境

1
2
3
4
5
6
7

192.168.1.204 h4.hequan.com h4 ## keystone

systemctl stop NetworkManager
systemctl disable NetworkManager

[iyunv@h4 ~]# yum install centos-release-openstack-liberty

1
2
3
4
5
6
7
8
9

[iyunv@h4 ~]# yum install  openstack-keystone openstack-utils  openstack-selinux  -y
[iyunv@h4 ~]# openstack-db --init --service  keystone  --rootpw  123456 --password  keystone
keystone default DB is not mysql. Would you like to reset to mysql now? (y/n): y
mysql-server is not installed.  Would you like to install it now? (y/n): y
mysqld is not running.  Would you like to start it now? (y/n): y
Verified connectivity to MySQL.
Creating 'keystone' database.
Initializing the keystone database, please wait...
Complete!

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20

[iyunv@h4 ~]# mysql -uroot -p123456
MariaDB [(none)]> show databases;

[iyunv@h4 keystone]# openssl rand -hex 10
73fa731f6fa567630fdd

[iyunv@h4 keystone]# pwd
/etc/keystone
[iyunv@h4 keystone]# vim keystone.conf

admin_token = 73fa731f6fa567630fdd
rabbit_host = localhost
rabbit_port = 5672
rabbit_hosts = $rabbit_host:$rabbit_port
rabbit_use_ssl = false
rabbit_userid = guest
rabbit_password = guest
rabbit_login_method = AMQPLAIN
rabbit_virtual_host = /
connection = mysql://keystone:keystone@192.168.1.204/keystone ###用到上面写的用户名和密码

启动服务

1
2
3
4
5
6

[iyunv@h4 keystone]# systemctl list-unit-files  | grep keyston
openstack-keystone.service          disabled

[iyunv@h4 keystone]# systemctl  start  openstack-keystone.service
[iyunv@h4 keystone]# systemctl  enable  openstack-keystone.service

现在没有用户，只有token

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29

cat keystone_token             ##创建文件
export SERVICE_TOKEN=73fa731f6fa567630fdd
export SERVICE_ENDPOINT=http://192.168.1.204:35357/ v2.0
export PS1='[\u@\h \W(keystone_token)]\$ '

source keystone_token

ps aux | grep keystone

keystone  3343  1.5  1.6 321844 68704 ?       Ss 20:10 0:05 /usr/bin/python2 /usr/bin/keystone-all

netstat -lntup | grep 35357
tcp       0    0 0.0.0.0:35357          0.0.0.0:*             LISTEN    3343/python2

keystone service-list

[iyunv@h4 ~]# keystone service-create --name keystone --type identity  --description="keystone"
+-------------+----------------------------------+
| Property  |             Value             |
+-------------+----------------------------------+
| description |          keystone          |
| enabled |             True             |
|    id    | e0c6163cb7dd42098225f13a3fa4220e |
|    name |          keystone          |
|    type |          identity          |
+-------------+----------------------------------+

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26

[iyunv@h4 ~]# keystone  endpoint-create  --service-id  e0c6163cb7dd42098225f13a3fa4220e  --publicurl  ''  --internalurl  ''  --adminurl  ''
可以找一个模板去抄

[iyunv@h1 ~(keystone_admin)]# keystone  endpoint-list
+----------------------------------+-----------+-------------------------------------------------+-------------------------------------------------+--------------------------------------------+----------------------------------+
|             id             | region  |                   publicurl                   |                internalurl                |                adminurl                |          service_id          |
+----------------------------------+-----------+-------------------------------------------------+-------------------------------------------------+--------------------------------------------+----------------------------------+
| e3d9a4fa64bd441ea3fe143b1d72b8a4 | RegionOne |       http://192.168.1.201:5000/v2.0       |       http://192.168.1.201:5000/v2.0       |    http://192.168.1.201:35357/v2.0    | 02ce8247c5924913a73422bcf5275c40 |
[iyunv@h1 ~(keystone_admin)]# keystone service-list
| 02ce8247c5924913a73422bcf5275c40 |  keystone  | identity | OpenStack Identity Service |

[iyunv@h4 ~]# keystone  endpoint-create  --service-id  e0c6163cb7dd42098225f13a3fa4220e  --publicurl  'http://192.168.1.201:5000/v2.0'  --internalurl  ''  --adminurl  '' --publicurl  'http://192.168.1.204:5000/v2.0'  --internalurl  'http://192.168.1.204:5000/v2.0'  --adminurl  'http://192.168.1.204:35357/v2.0'
+-------------+----------------------------------+
| Property  |             Value             |
+-------------+----------------------------------+
| adminurl  | http://192.168.1.204:35357/v2.0  |
|    id    | 810e5faef22f44aebd17f55d1808e3c5 |
| internalurl |  http://192.168.1.204:5000/v2.0  |
|  publicurl  |  http://192.168.1.204:5000/v2.0  |
| region |          regionOne          |
|  service_id | e0c6163cb7dd42098225f13a3fa4220e |
+-------------+----------------------------------+

创建管理员

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31

1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18

[iyunv@h4 ~]# cp keystone_token keystone_token_admin
[iyunv@h4 ~(keystone_admin)]# cat keystone_token_admin
unset SERVICE_TOKEN
unset SERVICE_ENDPOINT
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_AUTH_URL=http://192.168.1.204:35357/v2.0
export PS1='[\u@\h \W(keystone_admin)]\$ '

[iyunv@h4 ~(keystone_admin)]# keystone user-list       ##可以看到就表示成功了
+----------------------------------+-------+---------+-------+
|             id             |  name | enabled | email |
+----------------------------------+-------+---------+-------+
| 172b6a61991e4fbeafe9039688eb2afc | admin | True  |    |
+----------------------------------+-------+---------+-------+

关闭token验证

1 2	12 #admin_token = 73fa731f6fa567630fdd 13

至此安装完成。

lgp2016 · 发表于 2016-7-8 11:12:43

写的太乱了，一点格式都没有

账号		自动登录	找回密码
密码			立即注册

VMware vcenter+vSphere 6.5 U2共享

zabbix3.4.1安装部署+微信推送信息+大屏显

winhex数据恢复教程（非常巨大，内容丰富）

【跟谁学】韩宇极简英语课-技术人员不得不

用Zabbix通过JMX方式监控weblogic

Symantec Backup Exec 2015 2016/2012 BE20

NetScaler VPX部署之：NetScaler Gateway调

[经验分享] openstack学习笔记六多节点部署之keystone

扫码加入运维网微信交流群

[经验分享] openstack学习笔记六 多节点部署之keystone

[经验分享] openstack学习笔记六多节点部署之keystone