openstack endpoint create --region RegionOne \
identity internal http://controller:5000/v3
openstack endpoint create --region RegionOne \
identity admin http://controller:35357/v3
openstack --help
openstack endpoint list
openstack user list
openstack service list
openstack domain create --description “Default Domain” default
openstack project create --domain default \
--description “Admin Project” admin
openstack user create --domain default \
--password admin admin
openstack role create admin
openstack role add --project admin --user admin admin
openstack project create --domain default \
--description “Service Project” service
openstack project create --domain default \
--description “Demo Project” demo
openstack user create --domain default \
--password demo demo
openstack role create user
openstack role add --project demo --user demo user
参考
https://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/keystone-users.html
下面参考桑面的 -verify
unset OS_TOKEN OS_URL
openstack --os-auth-url http://controller:35357/v3 \
--os-project-domain-name default --os-user-domain-name default \
--os-project-name admin --os-username admin token issue
admin
vim admin-openrc
export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_AUTH_URL=http://controller:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
vim demo-openrc
export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=demo
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
grep -v ^# /etc/keystone/keystone.conf |uniq
/[token]
下面看你如何使用 如果用管理员使用下面第一个命令
source admin-openrc
source demo-openrc
##############################
. admin-openrc
[root@controller ~]# openstack token issue
±-----------±---------------------------------------------------------------------------------+
| Field | Value |
±-----------±---------------------------------------------------------------------------------+
| expires | 2019-04-14T04:43:56.179535Z |
| id | gAAAAABcsqx8nWMvP64e9qV6MuFh5Xx02GXnC8iavmPpEGoBJ3wlvqo7UOIbjWGILuPbXBOQAWuZT41O |
| | AnDY7b1C1VPZ9fe1-FbhXU8aE_C6aMSuZX6xvo3CHBc2mYprjTn5eJ5BIuibXidvMNkM0UtzEoYIMZsq |
| | rz_S_bYYGwXmv1A01z6DU1g |
| project_id | 384460d6ae4d4c69b598262b081836d0 |
| user_id | 54dd35e3bed048b995994371d7d4ba93
创建glance
MariaDB [(none)]> CREATE DATABASE glance;
Query OK, 1 row affected (0.00 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO ‘glance’@‘localhost’ \
IDENTIFIED BY ‘glance’;
Query OK, 0 rows affected (0.00 sec)
MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO ‘glance’@‘%’ IDENTIFIED BY ‘glance’; Query OK, 0 rows affected (0.00 sec)
openstack user create --domain default --password glance glance
openstack role add --project service --user glance admin
openstack role add --project service --user glance admin
openstack service create --name glance \
--description "OpenStack Image" image
openstack endpoint create --region RegionOne \
image public http://controller:9292
openstack endpoint create --region RegionOne \
image internal http://controller:9292
openstack endpoint create --region RegionOne \
image admin http://controller:9292
yum install openstack-glance -y
vim /etc/glance/glance-api.conf
[database]
connection = mysql+pymysql://glance:glance@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://control