openstack authentication api & curl

最新推荐文章于 2023-07-13 17:56:43 发布
原创 最新推荐文章于 2023-07-13 17:56:43 发布 · 869 阅读 · 0 ·
CC 4.0 BY-SA版权
版权声明：本文为博主原创文章，遵循 CC 4.0 BY-SA 版权协议，转载请附上原文出处链接和本声明。

本文介绍如何使用 OpenStack API 进行身份验证并请求服务。通过 cURL 命令演示了获取认证令牌的过程，并展示了如何利用该令牌调用 Compute API 列出可用的实例规格（flavors）、调用 Glance API 列出镜像以及调用 Neutron API 列出网络。

摘要生成于 C知道 ，由 DeepSeek-R1 满血版支持， 前往体验 >

2 Authentication and API request workflow

  1. Request an authentication token from the Identity endpoint that your cloud administrator gave you. Send a payload of credentials in the request as shown in Authenticate. If the request succeeds, the server returns an authentication token.
  2. Send API requests and include the token in the X-Auth-Token header. Continue to send API requests with that token until the service completes the request or the Unauthorized (401) error occurs.
  3. If the Unauthorized (401) error occurs, request another token.

3 Use OpenStack API through cURL

3.1 Request a token

Run this cURL command to request a token

curl -H "Content-type: application/json" -X 'POST' -d '{
    "auth": {
        "passwordCredentials": {
            "password": "admin",
            "username": "admin"
        },
        "tenantName": "admin"
    }
}' http://localhost:35357/v2.0/tokens | python -mjson.tool

and the output like the following:

{
    "access": {
        "metadata": {
            "is_admin": 0,
            "roles": [
                "afce989e7f1e4246820d29323f2c76e6"
            ]
        },
        "serviceCatalog": [
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:8774/v2/183d952bcb5d4091b8eef32124e5e264",
                        "id": "52f25a2d300a45f18daff447e78067c8",
                        "internalURL": "http://192.168.0.82:8774/v2/183d952bcb5d4091b8eef32124e5e264",
                        "publicURL": "http://192.168.0.82:8774/v2/183d952bcb5d4091b8eef32124e5e264",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "nova",
                "type": "compute"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:9696",
                        "id": "75271cb2ef2a40898ab4802ec0ac8928",
                        "internalURL": "http://192.168.0.82:9696",
                        "publicURL": "http://192.168.0.82:9696",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "neutron",
                "type": "network"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://127.0.0.1:8774/v3",
                        "id": "168a33a7ff2f4e43856092f49cd6cc75",
                        "internalURL": "http://127.0.0.1:8774/v3",
                        "publicURL": "http://127.0.0.1:8774/v3",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "novav3",
                "type": "computev3"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:9292",
                        "id": "4810fc083d2d4c27831231e7b355f490",
                        "internalURL": "http://192.168.0.82:9292",
                        "publicURL": "http://192.168.0.82:9292",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "glance",
                "type": "image"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:8777",
                        "id": "1abb5859e80a4902b7a1c2632177d2f0",
                        "internalURL": "http://192.168.0.82:8777",
                        "publicURL": "http://192.168.0.82:8777",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "ceilometer",
                "type": "metering"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:8773/services/Admin",
                        "id": "3ceab16c395d4fe1b959bdd95056024f",
                        "internalURL": "http://192.168.0.82:8773/services/Cloud",
                        "publicURL": "http://192.168.0.82:8773/services/Cloud",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "nova_ec2",
                "type": "ec2"
            },
            {
                "endpoints": [
                    {
                        "adminURL": "http://192.168.0.82:35357/v2.0",
                        "id": "9033bd5012104c3eba54a6a10a08bc76",
                        "internalURL": "http://192.168.0.82:5000/v2.0",
                        "publicURL": "http://192.168.0.82:5000/v2.0",
                        "region": "RegionOne"
                    }
                ],
                "endpoints_links": [],
                "name": "keystone",
                "type": "identity"
            }
        ],
        "token": {
            "audit_ids": [
                "psuJvHNnThyzShOQPrxQSQ"
            ],
            "expires": "2016-05-10T04:52:53Z",
            "id": "6007a2d9d43d4aa2b260ff1c0c464941",
            "issued_at": "2016-05-10T03:52:53.345511",
            "tenant": {
                "description": "admin tenant",
                "enabled": true,
                "id": "183d952bcb5d4091b8eef32124e5e264",
                "name": "admin"
            }
        },
        "user": {
            "id": "773a82dc932142e882824888fbcc919a",
            "name": "admin",
            "roles": [
                {
                    "name": "admin"
                }
            ],
            "roles_links": [],
            "username": "admin"
        }
    }
}

3.2 Use the token and tenant to send API requests

3.2.1 Use the Compute API to list flavors
curl -H "X-Auth-Token:8767d3598eca41bda24d15ccf2bcfd7f" -H "Content-type: application/json" -X 'GET' \
> http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors | python -mjson.tool

and the output:

{
    "flavors": [
        {
            "id": "1",
            "links": [
                {
                    "href": "http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors/1",
                    "rel": "self"
                },
                {
                    "href": "http://localhost:8774/183d952bcb5d4091b8eef32124e5e264/flavors/1",
                    "rel": "bookmark"
                }
            ],
            "name": "m1.tiny"
        },
        {
            "id": "2",
            "links": [
                {
                    "href": "http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors/2",
                    "rel": "self"
                },
                {
                    "href": "http://localhost:8774/183d952bcb5d4091b8eef32124e5e264/flavors/2",
                    "rel": "bookmark"
                }
            ],
            "name": "m1.small"
        },
        {
            "id": "3",
            "links": [
                {
                    "href": "http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors/3",
                    "rel": "self"
                },
                {
                    "href": "http://localhost:8774/183d952bcb5d4091b8eef32124e5e264/flavors/3",
                    "rel": "bookmark"
                }
            ],
            "name": "m1.medium"
        },
        {
            "id": "4",
            "links": [
                {
                    "href": "http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors/4",
                    "rel": "self"
                },
                {
                    "href": "http://localhost:8774/183d952bcb5d4091b8eef32124e5e264/flavors/4",
                    "rel": "bookmark"
                }
            ],
            "name": "m1.large"
        },
        {
            "id": "5",
            "links": [
                {
                    "href": "http://localhost:8774/v2/183d952bcb5d4091b8eef32124e5e264/flavors/5",
                    "rel": "self"
                },
                {
                    "href": "http://localhost:8774/183d952bcb5d4091b8eef32124e5e264/flavors/5",
                    "rel": "bookmark"
                }
            ],
            "name": "m1.xlarge"
        }
    ]
}
3.2.2 the Glane API to list images
curl -H "X-Auth-Token:8767d3598eca41bda24d15ccf2bcfd7f" -H "Content-type: application/json" \
-X 'GET' http://localhost:9292/v2/images | python -mjson.tool

and the output:

{
    "first": "/v2/images",
    "images": [
        {
            "checksum": "ee1eca47dc88f4879d8a229cc70a07c6",
            "container_format": "bare",
            "created_at": "2016-05-09T05:38:14Z",
            "disk_format": "qcow2",
            "file": "/v2/images/5cea5132-c93c-474a-92aa-e7872f2ec27c/file",
            "id": "5cea5132-c93c-474a-92aa-e7872f2ec27c",
            "min_disk": 0,
            "min_ram": 0,
            "name": "cirros",
            "owner": "183d952bcb5d4091b8eef32124e5e264",
            "protected": false,
            "schema": "/v2/schemas/image",
            "self": "/v2/images/5cea5132-c93c-474a-92aa-e7872f2ec27c",
            "size": 13287936,
            "status": "active",
            "tags": [],
            "updated_at": "2016-05-09T05:38:15Z",
            "virtual_size": null,
            "visibility": "public"
        }
    ],
    "schema": "/v2/schemas/images"
}
3.2.3 the Neutron API to list networks
curl -H "X-Auth-Token:8767d3598eca41bda24d15ccf2bcfd7f" -H "Content-type: application/json" \
-X 'GET' http://localhost:9696/v2.0/networks | python -mjson.tool

and the output:

{
    "networks": [
        {
            "admin_state_up": true,
            "id": "27a2d0a3-b5e6-4836-87a5-8a5211e54c57",
            "mtu": 0,
            "name": "test",
            "provider:network_type": "vlan",
            "provider:physical_network": "physnet0",
            "provider:segmentation_id": 58,
            "router:external": false,
            "shared": false,
            "status": "ACTIVE",
            "subnets": [
                "9d6d18e3-f402-4cb9-bbe0-60da1edd9cd7"
            ],
            "tenant_id": "183d952bcb5d4091b8eef32124e5e264"
        },
        {
            "admin_state_up": true,
            "id": "e0c6a1cc-0621-431e-abe0-b813763203fa",
            "mtu": 0,
            "name": "fred",
            "provider:network_type": "vlan",
            "provider:physical_network": "physnet0",
            "provider:segmentation_id": 300,
            "router:external": false,
            "shared": false,
            "status": "ACTIVE",
            "subnets": [],
            "tenant_id": "183d952bcb5d4091b8eef32124e5e264"
        }
    ]
}
openstack nova 源码解析 — Nova API 执行过程从(novaclient到Action)
烟云的计算
08-04 7626
目录目录 Nova API Nova API 的执行过程 novaclient 将 Commands 转换为标准的HTTP请求 PasteDeploy 将 HTTP 请求路由到具体的 WSGI Application Routes 将 HTTP 请求路由到具体的操作函数并执行Nova APINova API 是访问、使用 Nova 各组件服务的唯一途径，作为 novaclient 和 Nova se
openstack报错The request you have made requires authentication. (HTTP 401)
热门推荐
controllerha的博客
12-03 3万+
在使用openstack命令时出现The request you have made requires authentication. (HTTP 401) 刚刚配置完keystone突然出现401报错 [root@controller ~]# openstack service list The request you have made requires authentication.
curl命令访问openstack api
weixin_34248118的博客
11-26 311
nova--debug listcurl -i'http://192.168.0.2:5000/v2.0/tokens' -X POST -H "Accept:application/json" -H "Content-Type: application/json" -H"User-Agent: python-novaclient" -d '{"auth": {"tenan...
OpenStack API 认证和 API 请求工作流程
m0_37678708的博客
12-11 3363
参考：https://developer.openstack.org/zh_CN/api-guide/quick-start/api-quick-start.html#authentication-and-api-request-workflow 认证和 API 请求工作流程¶ 从云管理员提供的认证服务接入点请求一个认证令牌，以“ref:authenticate”的形式发送一个有效
requestAuthentication详解
mark's technic world
05-31 3201
学习目标 什么是RequestAuthentication RequestAuthentication defines what request authentication methods are supported by a workload. It will reject a request if the request contains invalid authentication information, based on the configured authenti...
openstack curl get token in v3.0
第十六维
02-09 3188
1.首先通过编辑器将如下内容写入token-requset.json { "auth": { "identity": { "methods": [ "password" ], "password": { "user": {
openstack restful api 使用
GIS+=地理信息+云计算+大数据+容器+物联网+...
12-25 4078
Openstack每个项目的接口遵循REST原则，通常也被称为RESTful接口,如何使用restful api 第一件事情你必须使用你的证书来认证来获取authentication token。证书包含了用户名、密码和tenant（项目）。你可以openrc.sh文件中得到他们。token允许你不需要再次认证就能和其他的service endpoints交互。Tokens通常存在2
openstack
docker-mo的博客
07-13 158
openstack-M版搭建 适用于零基础同学
OpenStack
xwy9526的博客
12-11 3684
文章目录 什么是云计算 基于互联网的相关服务的增加、使用和交付模式 这种模式提供可用的、便捷的、按需的网络访问,迚入可配置的计算资源共享池 这些资源能够被快速提供,只需投入很少的管理工作,戒不服务供应商迚行很少的交互 通常涉及通过互联网来提供劢态易扩展且经常是虚拟化的资源 云计算服务模型 一、IaaS IaaS是Infrastructure as a server的缩写，意思是基础设施即服务。云端公司把IT环境的基础设施建设好，然后直接对外出租硬件服务器或者虚拟机。消费者可以利用所有计算基础设施，包括处理C
OpenStack Client客户端的两种身份验证方式
Ray.Zhao的专栏
08-12 6325
OpenStackClient 是 OpenStack 提供的一个命令行CLI工具
openstack中使用curl命令获取token并访问底层的API
weixin_30535167的博客
10-22 2466
openstack中使用curl命令获取token并访问底层的API 　　在oepnstack中，访问所提供的服务（如创建虚拟机等）首先需要获取认证的token，也就是一个凭证，获取的方式是通过向OpenStack Identity模块发送一个带负载的认证请求，通常负载中携带的信息是用户名和密码。当访问底层提供的服务的时候，需要将token封装在X-Auth-Token头部中，如果需要访问ope...
kubeadm部署kubernetes 1.13.1集群
红尘六绝
03-14 1153
1.准备基础环境 配置至少2u2G 192.168.3.115 k8s-master kube-apiserver #组件 kube-controller-manager kube-scheduler kube-proxy etcd coredns kube-flannel 192.168.3.113 k8s-node1 kube-proxy #...
keystone rest api V3 版本测试
weixin_33749131的博客
01-15 340
2019独角兽企业重金招聘Python工程师标准>>> ...
(转)理解Keystone的四种Token
weixin_30603633的博客
01-11 666
Token 是什么 通俗的讲，token 是用户的一种凭证，需拿正确的用户名/密码向 Keystone 申请才能得到。如果用户每次都采用用户名/密码访问 OpenStack API，容易泄露用户信息，带来安全隐患。所以 OpenStack 要求用户访问其 API 前，必须先获取 token，然后用 token 作为用户凭据访问 OpenStack API。 四种 Token 的由来 D...
解决Ceph集群Mon和OSD网络变更或者ip(主要是mon)变换后，集群不能正常工作问题
icee
07-24 3732
**目的：解决Ceph集群Mon和OSD网络变更或者ip(主要是mon)变换后，集群不能正常工作问题 环境： 系统：Ubuntu 环境：Ubuntu 17.10 Ceph版本 10.2.10 问题分析： Ceph的Monitor是集群中非常重要的模块，它们需要维护一组合理有效的Monitor节点信息，这些节点之间彼此能发现，它们通过选举达成一致的状态，来保证整个C...
Understanding OpenStack Authentication: Keystone PKI
junheart的专栏
08-12 1102
现在知道为什么keystone要支持PKI Token了 http://www.mirantis.com/blog/understanding-openstack-authentication-keystone-pki/ by Bartek Kupidura July 10, 2013 The latest stable release of OpenStack,
openstack API 开发 - 关于获取token
weixin_34114823的博客
07-24 485
1, 获取tokencurl -d '{"auth": {"tenantName": "admin", "passwordCredentials": {"username": "admin", "password": "admin"}}}' -H "Content-type: application/json" http://127.0.0.1:35357/v2.0/toke...
在虚机entos 上部署openstack 时，出现request you have made requires authentication.(http 401) ，怎么解决？
最新发布
04-03
引用[3]提到未授权访问测试，使用curl访问未授权的端口，这可能提醒用户检查OpenStack服务的端口是否正确配置，以及防火墙设置是否阻止了必要的通信。例如，确保Keystone的端口（通常是5000和35357）是否开放，并且...
评论
添加红包

请填写红包祝福语或标题

个

红包个数最小为10个

元

红包金额最低5元

当前余额3.43元 前往充值 >
需支付：10.00元
成就一亿技术人!
领取后你会自动成为博主和红包主的粉丝 规则
hope_wisdom
发出的红包
实付元
使用余额支付
点击重新获取
扫码支付
钱包余额 0

抵扣说明：

1.余额是钱包充值的虚拟货币，按照1:1的比例进行支付金额的抵扣。
2.余额无法直接购买下载，可以购买VIP、付费专栏及课程。

余额充值