openstack--keystone

Posted 2020-12-01 azu883

yun1

OpenStack packages

yum install python-openstackclient -y  

yum install openstack-selinux

SQL database

yum install mariadb mariadb-server python2-Pymysql
vim /etc/my.cnf.d/openstack.cnf

[mysqld]
bind-address = 192.168.254.131
default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096 
collation-server = utf8_general_ci
character-set-server = utf8

systemctl enable mariadb.service
systemctl start mariadb.service

mysql_secure_installation 初始化数据库（必做）设密码等

Message queue

yum install rabbitmq-server

 systemctl enable rabbitmq-server.service

 systemctl start rabbitmq-server.service

rabbitmqctl add_user openstack admin

rabbitmqctl set_permissions openstack ".*" ".*" ".*" 给权限

Setting permissions for user "openstack" in vhost "/" 添加openstack为管理员

Memcached

yum install memcached python-memcached
vim /etc/sysconfig/memcached

OPTIONS="-l 127.0.0.1,::1,yun1" 改一行

systemctl enable memcached.service
systemctl start memcached.service

Identity service

Install and configure

mysql -u root -p

MariaDB [(none)]> CREATE DATABASE keystone;

MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone‘@‘localhost‘ IDENTIFIED BY ‘KEYSTONE_DBPASS‘;
MariaDB [(none)]> GRANT ALL PRIVILEGES ON keystone.* TO ‘keystone‘@‘%‘ IDENTIFIED BY ‘KEYSTONE_DBPASS‘;

yum install openstack-keystone httpd mod_wsgi

cp keystone.conf keystone.bak 备份一个

/etc/keystone/keystone.conf

[DEFAULT]

 

[assignment]

 

[auth]

 

[cache]

 

[catalog]

 

[cors]

 

[cors.subdomain]

 

[credential]

 

[database]

connection = mysql+pymysql://keystone:KEYSTONE_DBPASS@yun1/keystone

 

[domain_config]

 

[endpoint_filter]

 

[endpoint_policy]

 

[eventlet_server]

 

[federation]

 

[fernet_tokens]

 

[healthcheck]

 

[identity]

 

[identity_mapping]

 

[kvs]

 

[ldap]

 

[matchmaker_redis]

 

[memcache]

 

[oauth1]

 

[oslo_messaging_amqp]

 

[oslo_messaging_kafka]

 

[oslo_messaging_notifications]

 

[oslo_messaging_rabbit]

 

[oslo_messaging_zmq]

 

[oslo_middleware]

 

[oslo_policy]

 

[paste_deploy]

 

[policy]

 

[profiler]

 

[resource]

 

[revoke]

 

[role]

 

[saml]

 

[security_compliance]

 

[shadow_users]

 

[signing]

 

[token]

provider = fernet

 

[tokenless_auth]

 

[trust]

su -s /bin/sh -c "keystone-manage db_sync" keystone  导入数据 导入后进入 keystone库 看是否有tables

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone 设置用户 keytone管理组keytone
#keystone-manage credential_setup --keystone-user keystone --keystone-group keystone 认证

keystone-manage bootstrap --bootstrap-password admin   --bootstrap-admin-url http://yun1:35357/v3/   --bootstrap-internal-url http://yun1:5000/v3/   --bootstrap-public-url http://yun1:5000/v3/   --bootstrap-region-id RegionOne

Configure the Apache HTTP server

vim /etc/httpd/conf/httpd.conf

ServerName yun1

ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/ 建立链接

systemctl enable httpd.service
# systemctl start httpd.service
vim openrc

export OS_USERNAME=admin
export OS_PASSWORD=admin
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://yun1:35357/v3
export OS_IDENTITY_API_VERSION=3

source openrc 宣告环境变量
就可以用openstack命令