openstack入门搭建_flavor = keystone

openstack endpoint create --region RegionOne \
  identity internal http://controller:5000/v3

openstack endpoint create --region RegionOne \
  identity admin http://controller:35357/v3

openstack   --help

openstack  endpoint  list

openstack user  list

openstack  service list

openstack domain create --description “Default Domain” default

openstack project create --domain default \
  --description “Admin Project” admin

openstack user create --domain default \
  --password  admin  admin

openstack role create admin

openstack role add --project admin --user admin admin

openstack project create --domain default \
  --description “Service Project” service

openstack project create --domain default \
  --description “Demo Project” demo

openstack user create --domain default \
  --password  demo demo

openstack role create user

openstack role add --project demo --user demo user

参考

https://docs.openstack.org/mitaka/zh_CN/install-guide-rdo/keystone-users.html

下面参考桑面的   -verify

unset OS_TOKEN OS_URL

openstack --os-auth-url http://controller:35357/v3 \
  --os-project-domain-name default --os-user-domain-name default \
  --os-project-name admin --os-username admin token issue

admin

vim  admin-openrc

export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_AUTH_URL=http://controller:35357/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

vim  demo-openrc

export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_NAME=demo
export OS_USERNAME=demo
export OS_PASSWORD=demo
export OS_AUTH_URL=http://controller:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2

grep -v ^#  /etc/keystone/keystone.conf  |uniq

/[token]

下面看你如何使用   如果用管理员使用下面第一个命令

source  admin-openrc

source  demo-openrc

##############################

. admin-openrc

[root@controller ~]# openstack token issue
±-----------±---------------------------------------------------------------------------------+
| Field      | Value                                                                            |
±-----------±---------------------------------------------------------------------------------+
| expires    | 2019-04-14T04:43:56.179535Z                                                      |
| id         | gAAAAABcsqx8nWMvP64e9qV6MuFh5Xx02GXnC8iavmPpEGoBJ3wlvqo7UOIbjWGILuPbXBOQAWuZT41O |
|            | AnDY7b1C1VPZ9fe1-FbhXU8aE_C6aMSuZX6xvo3CHBc2mYprjTn5eJ5BIuibXidvMNkM0UtzEoYIMZsq |
|            | rz_S_bYYGwXmv1A01z6DU1g                                                          |
| project_id | 384460d6ae4d4c69b598262b081836d0                                                 |
| user_id    | 54dd35e3bed048b995994371d7d4ba93

创建glance

MariaDB [(none)]> CREATE DATABASE glance;
Query OK, 1 row affected (0.00 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO ‘glance’@‘localhost’ \
   IDENTIFIED BY ‘glance’;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> GRANT ALL PRIVILEGES ON glance.* TO ‘glance’@‘%’    IDENTIFIED BY ‘glance’; Query OK, 0 rows affected (0.00 sec)

openstack user create --domain default --password  glance glance

openstack role add --project service --user glance admin

openstack role add --project service --user glance admin
openstack service create --name glance \
  --description "OpenStack Image" image
openstack endpoint create --region RegionOne \
  image public http://controller:9292
openstack endpoint create --region RegionOne \
  image internal http://controller:9292
openstack endpoint create --region RegionOne \
  image admin http://controller:9292
yum install openstack-glance -y 

vim /etc/glance/glance-api.conf

[database]
connection = mysql+pymysql://glance:glance@controller/glance
[keystone_authtoken]
auth_uri = http://controller:5000
auth_url = http://control
### OpenStack 环境搭建准备流程 #### 一、前期规划与资源确认 确保硬件设施满足最低需求,包括但不限于服务器数量、CPU性能、内存容量以及存储空间。对于网络部分,则需预先设定好内部外部网路划分方案。 #### 二、操作系统安装及基础配置 选择适合版本的操作系统进行部署,并完成必要的初始化设置工作,比如更新软件包列表、关闭防火墙(如果安全策略允许)、调整内核参数等操作来优化运行环境[^2]。 ```bash yum update -y systemctl stop firewalld && systemctl disable firewalld echo "net.ipv4.ip_forward = 1" >> /etc/sysctl.conf sysctl -p ``` #### 三、添加OpenStack仓库并安装相关工具 为了获取最新的稳定版OpenStack组件,应先加入官方提供的YUM源,之后再利用`yum`指令批量下载所需的服务端程序及其依赖项。 ```bash yum install centos-release-openstack-train -y yum upgrade -y ``` #### 四、数据库与消息队列服务的建立 构建MariaDB/MySQL用于保存各类元数据;通过RabbitMQ实现不同模块间的消息传递机制。此阶段还需注意创建专用账户供后续各部件连接使用时验证身份之用[^3]。 ```sql CREATE DATABASE keystone; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'KEYSTONE_DBPASS'; GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'KEYSTONE_DBPASS'; rabbitmqctl add_user openstack OPENSTACK_PASS rabbitmqctl set_permissions openstack ".*" ".*" ".*" ``` #### 五、核心组件部署 依次按照官方文档指导顺序逐步引入Keystone认证中心、Glance镜像管理平台、Nova计算节点控制器等功能单元至集群当中去[^1]。 ```bash systemctl enable openstack-glance-api.service systemctl start openstack-glance-api.service ``` #### 六、测试验证环节 最后一步便是检验整个架构能否正常运作起来——借助Horizon仪表板或是CLI客户端提交API请求的方式来进行简单的功能检测活动[^4]。 ```python import os from novaclient import client as nv_client nova = nv_client.Client(2, username='admin', api_key='ADMIN_PASS', project_id='demo', auth_url='http://controller:5000/v3') flavors = nova.flavors.list() for flavor in flavors: print(flavor.name) ```
评论
添加红包

请填写红包祝福语或标题

红包个数最小为10个

红包金额最低5元

当前余额3.43前往充值 >
需支付:10.00
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明:

1.余额是钱包充值的虚拟货币,按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载,可以购买VIP、付费专栏及课程。

余额充值