How to install Identity Service-Keystone in OpenStack
This article mainly shows you "OpenStack how to install Identity Service-Keystone", the content is easy to understand, clear, hope to help you solve your doubts, the following let the editor lead you to study and learn "OpenStack how to install Identity Service-Keystone" this article.
At the Controller node
# apt-get install mariadb-server python-mysqldb
# nano / etc/mysql/my.cnf
Make the following changes in my.cnf:
Bind-address = 10.10.10.10
Default-storage-engine = innodb
Innodb_file_per_table
Collation-server = utf8_general_ci
Init-connect = 'SET NAMES utf8'
Character-set-server = utf8
# service mysql restart
# mysql_secure_installation
# apt-get install rabbitmq-server
# rabbitmqctl change_password guest openstack
# mysql-u root-p
> CREATE DATABASE keystone
> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY' openstack'
> GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY' openstack'
> exit
# apt-get install keystone python-keystoneclient
# nano / etc/keystone/keystone.conf
[DEFAULT]
...
Verbose = True
Admin_token = openstack
.
Connection = mysql://keystone:openstack@controller/keystone
Provider = keystone.token.providers.uuid.Provider
Driver = keystone.token.persistence.backends.sql.Token
[revoke]
...
Driver = keystone.contrib.revoke.backends.sql.Revoke
# keystone-manage db_sync
# service keystone restart
# rm-f / var/lib/keystone/keystone.db
# export OS_SERVICE_TOKEN=openstack
# export OS_SERVICE_TOKEN=openstack
# export OS_SERVICE_ENDPOINT= http://controller:35357/v2.0
# keystone tenant-create-name admin-description "Admin Tenant"
# keystone user-create-name admin-pass openstack-email admin@example.com
# keystone role-create-name admin
# keystone user-role-add-user admin-tenant admin-role admin
# keystone tenant-create-name demo-description "Demo Tenant"
# keystone user-create-name demo-tenant demo-pass DEMO_PASS-email demo@example.com
# keystone tenant-create-name service-description "Service Tenant"
# keystone service-create-name keystone-type identity-description "OpenStack Identity"
# keystone endpoint-create-service-id $(keystone service-list | awk'/ identity / {print $2}')-publicurl http://controller:5000/v2.0-- internalurl http://controller:5000/v2.0-- adminurl http://controller:35357/v2.0-- region regionOne
# unset OS_SERVICE_TOKEN OS_SERVICE_ENDPOINT
# keystone-os-tenant-name admin-os-username admin-os-password openstack-os-auth-url http://controller:35357/v2.0 token-get
# keystone-os-tenant-name admin-os-username admin-os-password openstack-os-auth-url http://controller:35357/v2.0 user-list
# keystone-os-tenant-name admin-os-username admin-os-password openstack-os-auth-url http://controller:35357/v2.0 role-list
# keystone-os-tenant-name demo-os-username demo-os-password openstack-os-auth-url http://controller:35357/v2.0 token-get
# touch admin-openrc.sh
Export OS_TENANT_NAME=admin
Export OS_USERNAME=admin
Export OS_PASSWORD=openstack
Export OS_AUTH_URL= http://controller:35357/v2.0
# touch demo-openrc.sh
Export OS_TENANT_NAME=demo
Export OS_USERNAME=demo
Export OS_PASSWORD=openstack
Export OS_AUTH_URL= http://controller:5000/v2.0
# source admin-openrc.sh
The above is all the contents of the article "how to install Identity Service-Keystone in OpenStack". Thank you for reading! I believe we all have a certain understanding, hope to share the content to help you, if you want to learn more knowledge, welcome to follow the industry information channel!
