第一步：數據創建keystone的庫
[root@zxw6 ~]# mysql -uroot -p123
create database keystone;
第二步：創建keystone的用戶
grant all on keystone.* to keystone@localhost identified by 'zxw6';
給與遠程登陸權限
grant all on keystone.* to keystone@'%' identified by 'zxw6';
第三步：下載安裝keystone的主服務
[root@zxw6 ~]# yum install openstack-keystone httpd mod_wsgi -y
第四步：keystone配置文件
[root@zxw6 ~]# vim /etc/keystone/keystone.conf
[DEFAULT]
[assignment]
[auth]
[cache]
[catalog]
[cors]
[cors.subdomain]
[credential]
[database]
connection = mysql+pymysql://keystone:zxw6@zxw6/keystone
[domain_config]
[endpoint_filter]
[endpoint_policy]
[eventlet_server]
[federation]
[fernet_tokens]
[healthcheck]
[identity]
[identity_mapping]
[kvs]
[ldap]
[matchmaker_redis]
[memcache]
[oauth1]
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_messaging_zmq]
[oslo_middleware]
[oslo_policy]
[paste_deploy]
[policy]
[profiler]
[resource]
[revoke]
[role]
[saml]
[security_compliance]
[shadow_users]
[signing]
[token]
provider = fernet
[tokenless_auth]
[trust]
第五步：導入keystone數據庫的內容
[root@zxw6 ~]# su -s /bin/sh -c "keystone-manage db_sync" keystone
第六步：設置keystone的用和組
[root@zxw6 ~]# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
設置一個查看keystone時候從組里的用戶查找
[root@zxw6 ~]# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone
第七步：設置keystone的服務端點
[root@zxw6 ~]# keystone-manage bootstrap --bootstrap-password zxw6 \
--bootstrap-admin-url http://zxw6:35357/v3/ \ 管理
--bootstrap-internal-url http://zxw6:5000/v3/ \ 服務
--bootstrap-public-url http://zxw6:5000/v3/ \ 共享
--bootstrap-region-id RegionOne
第八步：修改httpd的配置文件
[root@zxw6 ~]# vim /etc/httpd/conf/httpd.conf
ServerName zxw6
第九步：軟鏈接keystone到httpd
[root@zxw6 ~]# ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
[root@zxw6 ~]# ls /etc/httpd/conf.d/
autoindex.conf userdir.conf wsgi-keystone.conf
README welcome.conf
第十步：啟動httpd
[root@zxw6 ~]# systemctl start httpd.service
[root@zxw6 ~]# systemctl enable httpd.service
第十一步：登錄認證
[root@zxw6 ~]# vim openrc
export OS_USERNAME=admin 系統用戶
export OS_PASSWORD=zxw6 用戶密碼
export OS_PROJECT_NAME=admin 工作項目名字
export OS_USER_DOMAIN_NAME=Default 用戶工作的域
export OS_PROJECT_DOMAIN_NAME=Default 域的名字
export OS_AUTH_URL=http://zxw6:35357/v3 查找路徑keystone
export OS_IDENTITY_API_VERSION=3 版本
~
第十二步：生效變量
[root@zxw6 ~]# source openrc
取消變量unset
第十三步：列出openstack用戶
[root@zxw6 ~]# openstack user list
+----------------------------------+-------+
| ID | Name |
+----------------------------------+-------+
| 8aca16a49b89486db6edc682e71f8403 | admin |
+----------------------------------+-------+
第十四步：創建項目
[root@zxw6 ~]# openstack project create --domain default \
--description "Service Project" service
[root@zxw6 ~]# openstack project create --domain default \
--description "Demo Project" demo
第十五步：創建用戶並設置密碼
[root@zxw6 ~]# openstack user create --domain default --password=zxw6 demo
第十六步：創建角色
[root@zxw6 ~]# openstack role create user
第十七步：設置deom用戶到user角色
[root@zxw6 ~]# openstack role add --project demo --user demo user
手動輸入密碼
[root@zxw6 ~]# cat openrc
export OS_USERNAME=admin
export OS_PASSWORD=zxw6
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://zxw6:35357/v3
export OS_IDENTITY_API_VERSION=3
[root@zxw6 ~]# unset OS_AUTH_URL OS_PASSWORD
[root@zxw6 ~]# openstack --os-auth-url http://zxw6:35357/v3 \
> --os-project-domain-name default --os-user-domain-name default \
> --os-project-name admin --os-username admin token issue
Password:
+------------+------------------------------------------------------------+
| Field | Value |
+------------+------------------------------------------------------------+
| expires | 2019-07-29T13:40:02+0000 |
| id | gAAAAABdPukih2C_J6L2ylhNxok6lOiF8RjGI2u-FVJanHvp0pmhsD1Soy |
| | bn6Kyt1TiS5QQpxry6DIgB7LriYKacoMgZMqTE7nVk1fTexuOqFMnE6Fi4 |
| | z2gnZPYOBL8gpT9CtUXDNj-c786G4xYv5Nh- |
| | jIsnhrTTuIc0MxJmfuAm5vAdnKbdpNU |
| project_id | 8affb35ba4134a8d8d120a0fad7cc85b |
| user_id | 8aca16a49b89486db6edc682e71f8403 |
+------------+------------------------------------------------------------+