&&国之画&&布布分享&&&& &&&&
版权所有 京ICP备号-2
迷上了代码！keystone command line utility (pending deprecation) & python-keystoneclient 2.2.0 documentation
keystone command line utility (pending deprecation)
keystone [options] &command& [command-options]
keystone help
keystone help &command&
DESCRIPTION
The keystone command line utility is pending deprecation. The
used instead. The keystone command line utility only supports V2
of the Identity API whereas the OSC program supports both V2 and V3.
The keystone command line utility interacts with services providing
OpenStack Identity API (e.g. Keystone).
To communicate with the API, you will need to be authenticated - and the
keystone provides multiple options for this.
While bootstrapping Keystone the authentication is accomplished with a
shared secret token and the location of the Identity API endpoint. The
shared secret token is configured in keystone.conf as “admin_token”.
You can specify those values on the command line with --os-token
and --os-endpoint, or set them in environment variables:
OS_SERVICE_TOKEN
Your Keystone administrative token
OS_SERVICE_ENDPOINT
Your Identity API endpoint
The command line options will override any environment variables set.
If you already have accounts, you can use your OpenStack username and
password. You can do this with the --os-username,
--os-password.
Keystone allows a user to be associated with one or more projects which are
historically called tenants.
To specify the project for which you want to
authorize against, you may optionally specify a --os-tenant-id or
--os-tenant-name.
Instead of using options, it is easier to just set them as environment
variables:
OS_USERNAME
Your Keystone username.
OS_PASSWORD
Your Keystone password.
OS_TENANT_NAME
Name of Keystone project.
OS_TENANT_ID
ID of Keystone Tenant.
OS_AUTH_URL
The OpenStack API server URL.
OS_IDENTITY_API_VERSION
The OpenStack Identity API version.
The location for the CA truststore (PEM formatted) for this client.
The location for the keystore (PEM formatted) containing the public
key of this client.
This keystore can also optionally contain the
private key of this client.
The location for the keystore (PEM formatted) containing the private
key of this client.
This value can be empty if the private key is
included in the OS_CERT file.
For example, in Bash you’d use:
export OS_USERNAME=yourname
export OS_PASSWORD=yadayadayada
export OS_TENANT_NAME=myproject
export OS_AUTH_URL=http(s)://:/
export OS_IDENTITY_API_VERSION=2.0
export OS_CACERT=/etc/keystone/yourca.pem
export OS_CERT=/etc/keystone/yourpublickey.pem
export OS_KEY=/etc/keystone/yourprivatekey.pem
To get a list of available commands and options run:
keystone help
To get usage and options of a command:
keystone help &command&
Get information about endpoint-create command:
keystone help endpoint-create
View endpoints of OpenStack services:
keystone catalog
Create a ‘service’ project:
keystone tenant-create --name=service
Create service user for nova:
keystone user-create --name=nova \
--tenant_id=&project ID& \
View roles:
keystone role-list
Keystone client is hosted in Launchpad so you can view current bugs at
NavigationPowered byCentOS 7部署OpenStack（2）—安装keystone服务
| Field&&&&& | Value&&&&&&&&&&&&&&&&&&&&&&&&&&& |
+------------+----------------------------------+
| expires&&& |T09:58:41.540674Z&&&&& |
| id&&&&&&&& |ccca55a979da427b849ecd |
| project_id | 69de6b7c4c3937d5baa89 |
| user_id&&& |8c0b8dc884f742bea6f882a2b487f092 |
+------------+----------------------------------+
5.4、配置环境变量
进行该步骤的原因是为了方便执行命令，否则必须输入一大串的参数
[root@controller ~]# vim admin-openrc.sh
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=admin
export OS_TENANT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=123456
export OS_AUTH_URL=http://192.168.1.11:35357/v3
export OS_IDENTITY_API_VERSION=3
[root@controller ~]# vim kevin-openrc.sh
export OS_PROJECT_DOMAIN_ID=default
export OS_USER_DOMAIN_ID=default
export OS_PROJECT_NAME=kevin
export OS_TENANT_NAME=kevin
export OS_USERNAME=kevin
export OS_PASSWORD=kevin
export OS_AUTH_URL=http://192.168.1.11:5000/v3
export OS_IDENTITY_API_VERSION=3
[root@controller ~]# chmod +x admin-openrc.sh kevin-openrc.sh
1、创建数据库
[root@controller ~]# mysql -u root -p -e &CREATE DATABASE&
Enter password:
[root@controller ~]# mysql -uroot -p -e &GRANT ALL PRIVILEGES ONkeystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';&
Enter password:
[root@controller ~]# mysql -uroot -p -e &GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY 'keystone';&
Enter password:
2、安装keystone
[root@controller ~]# yum install -y openstack-keystone httpd mod_wsgi memcached python-memcached
3、配置keystone
3.1、同步数据库
[root@controller ~]# openssl rand -hex 10
[root@controller ~]# vim /etc/keystone/keystone.conf
12 admin_token = a5288056
495 connection = mysql://keystone:keystone@192.168.1.11/keystone
[root@controller ~]# su -s /bin/sh -c &keystone-manage db_sync&keystone
3.2、配置连接memcache
[root@controller ~]# vim /etc/keystone/keystone.conf
1305 servers = 192.168.1.11:11211
1710 driver = sql
1903 provider = uuid
1908 driver = memcache
3.3启动memcache和httpd服务
[root@controller ~]# systemctl enable memcached
[root@controller ~]# systemctl start memcached
[root@controller ~]# vim /etc/httpd/conf.d/wsgi-keystone.conf
Listen 5000
Listen 35357
&&& WSGIDaemonProcesskeystone-public processes=5 threads=1 user=keystone group=keystonedisplay-name=%{GROUP}
&&& WSGIProcessGroupkeystone-public
&&& WSGIScriptAlias //usr/bin/keystone-wsgi-public
&&& WSGIApplicationGroup %{GLOBAL}
&&& WSGIPassAuthorization On
&&& = 2.4&
&&&&& ErrorLogFormat &%{cu}t%M&
&&& ErrorLog/var/log/httpd/keystone-error.log
&&& CustomLog /var/log/httpd/keystone-access.logcombined
&&&&&&& = 2.4&
&&&&&&&&&&& Require all granted
&&&&&&&&&&& Order allow,deny
&&&&&&&&&&& Allow from all
&&& WSGIDaemonProcesskeystone-admin processes=5 threads=1 user=keystone group=keystone display-name=%{GROUP}
&&& WSGIProcessGroup keystone-admin
&&& WSGIScriptAlias //usr/bin/keystone-wsgi-admin
&&& WSGIApplicationGroup %{GLOBAL}
&&& WSGIPassAuthorization On
&&& = 2.4&
&&&&& ErrorLogFormat &%{cu}t%M&
&&& ErrorLog/var/log/httpd/keystone-error.log
&&& CustomLog/var/log/httpd/keystone-access.log combined
&&&&&&& = 2.4&
&&&&&&&&&&& Require all granted
&&&&&&&&&&& Order allow,deny
&&&&&&&&&&& Allow from all&&&&&&&[6]&&&&&&&
【声明】:黑吧安全网()登载此文出于传递更多信息之目的，并不代表本站赞同其观点和对其真实性负责，仅适于网络安全技术爱好者学习研究使用，学习中请遵循国家相关法律法规。如有问题请联系我们，联系邮箱，我们会在最短的时间内进行处理。
上一篇：【】【】}