OpenStack(centos7.3,centos-release-openstack-ocata)

?

nova:計算節點

???????? queue:消息隊列,系統瓶頸所在

???????? scheduler:調度機制

???????? conductor:更新數據庫

???????? certobjectstore):證書

???????? console:連接端口

???????? consoleauth:連接端口認證

?

glance:存儲映像文件和硬盤

???????? registry:調用數據庫的接口,檢索接口

???????? database:映像文件的存儲位置等

?????????????????? swift:分布式存儲

?

neutron:網絡服務,負責接收對網絡的調用請求

???????? plugins:插件

???????? agents:網絡服務器

?

cinder:塊存儲

???????? api:接受請求并分配volume

???????? vloume

???????? database

???????? scheduler

?

swift:存儲對象節點

???????? account:賬號管理

???????? container:容量管理,管理阿布管理

???????? object:對象管理

?

?

環境準備

控制節點

hostnamelinux-node1.oldboyedu.com

ip地址:192.168.1.30

計算節點:

hostnamelinux-node2.oldboyedu.com

ip地址:192.168.1.31

?

?

先配置控制節點192.168.1.30

vi /etc/sysconfig/network-scripts/ifcfg-ens33

BOOTPROTO=static

DEVICE=ens33

NM_CONTROLLLER=yes

IPADDR=192.168.1.30

NETMASK=255.255.255.0

GATEWAY=192.168.1.1

重啟網卡使設置生效

nmcli connection down ens33

nmcli connection up ens33

?

修改主機名

需要修改兩處:一處是/etc/hostname,另一處是/etc/hosts

[root@localhost ~]# vi /etc/hostname

linux-node1

[root@localhost ~]# systemctlrestart NetworkManager

[root@localhost ~]# hostname

linux-node1

[root@localhost ~]# vi /etc/hosts

192.168.1.30?? linux-node1????? linux-node1.oldboyedu.com

192.168.1.31?? linux-node2????? linux-node2.oldboyedu.com

將上面兩個文件修改完后,并不能立刻生效。如果要立刻生效的話,可以用 hostname your-hostname 作臨時修改,它只是臨時地修改主機名,系統重啟后會恢復原樣的。

hostname linux-node1

?

?

?

安裝時間同步

yum install chrony

?

[root@localhost ~]# vi /etc/chrony.conf

allow 192.168.0.0/16

?

設置開機自啟動

[root@localhost ~]# systemctlenable chronyd.service

?

啟動chronyd

[root@localhost ~]# systemctl start chronyd.service

?

[root@localhost ~]# timedatectl set-timezone Asia/Shanghai

[root@localhost ~]# date

Thu Nov? 2 16:23:07 CST 2017

?

關閉 selinux(centos7.3需要改2個地方/etc/sysconfig/selinux/etc/selinux/config)
sed -i's#SELINUX=enforcing#SELINUX=disabled#g' /etc/sysconfig/selinux

sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
setenforce 0

getenforce可查看selinux的狀態

?


關閉 iptables
systemctlstop firewalld.service
systemctldisable firewalld.service

?

[root@localhost ~]# cat /etc/redhat-release

CentOS Linux release 7.3.1611 (Core)

?

升級本地軟件:

[root@localhost ~]# yum update-y

?

?

[root@localhost ~]#yum installcentos-release-openstack-liberty -y

Loaded plugins: fastestmirror

epel/x86_64/metalink???????????????????????????????????? | 6.1kB???? 00:00????

epel????????????????????????????????????????????????????| 4.3 kB???? 00:00????

(1/3): epel/x86_64/group_gz??????????????????????????????? | 261 kB?? 00:00????

(2/3): epel/x86_64/updateinfo????????????????????????????? | 842 kB?? 00:01????

(3/3): epel/x86_64/primary_db????????????????????????????? | 6.1 MB?? 00:04????

Loading mirror speeds from cached hostfile

?* base: mirrors.163.com

?* epel: mirrors.ustc.edu.cn

?* extras: mirrors.cn99.com

?* updates: mirrors.163.com

No package centos-release-openstack-liberty available.

Error: Nothing to do

?

解決:選擇安裝Ocatayum源(我的噩夢開始了。。。。。。。。。。。。。)

[root@localhost ~]#yum install centos-release-openstack-ocata -y

?

再升級一遍,以防萬一,防止軟件版本過低。

[root@localhost ~]#yumupgrade -y

?

驗證yum源是否可用:

[root@localhost ~]#yum repolist

?

[root@localhost~]#yum install python-openstackclient -y

?

MySQL

[root@localhost yum.repos.d]# yum install mariadb mariadb-server MySQL-python-y [root@localhostyum.repos.d]# cp /usr/share/mysql/my-medium.cnf /etc/my.cnf

[root@localhostyum.repos.d]# vi /etc/my.cnf

[mysqld]

default-storage-engine= innodb

innodb_file_per_table

collation-server =utf8_general_ci

init-connect = 'SETNAMES utf8'

character-set-server = utf8

[root@localhostyum.repos.d]# systemctl enable mariadb.service

Created symlink from /etc/systemd/system/multi-user.target.wants/mariadb.serviceto /usr/lib/systemd/system/mariadb.service.

[root@localhostyum.repos.d]#systemctlstart mariadb.service

[root@localhostyum.repos.d]# mysql_secure_installation? (一路 y 回車) (設置mysql的密碼123456)

[root@localhostyum.repos.d]# mysql -uroot -p123456

CREATE DATABASE keystone;

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost'IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY'keystone';

CREATE DATABASE glance;

GRANT ALL PRIVILEGES ONglance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';

GRANT ALL PRIVILEGES ONglance.* TO 'glance'@'%' IDENTIFIED BY 'glance';

CREATE DATABASE nova;

GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';

GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'%' IDENTIFIED BY 'nova';

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';

GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';

CREATE DATABASE cinder;

GRANT ALL PRIVILEGES ONcinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';

GRANT ALL PRIVILEGES ONcinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';

?

?

安裝RabbitMQ

[root@localhost ~]# yum install rabbitmq-server -y

Error: Package:erlang-erts-18.3.4.4-2.el7.x86_64 (centos-openstack-liberty)

?????????? Requires: lksctp-tools

解決:

[root@localhost ~]# rpm -ivhlksctp-tools-1.0.17-2.el7.x86_64.rpm

[root@localhost ~]# yuminstall rabbitmq-server -y

[root@localhost~]# systemctl enable rabbitmq-server.service???

Created symlink from/etc/systemd/system/multi-user.target.wants/rabbitmq-server.service to/usr/lib/systemd/system/rabbitmq-server.service.

[root@localhost ~]# systemctl start rabbitmq-server.service

?

[root@localhost ~]# netstat-ntlp

5672rabbitmq端口號

?

新建Rabbitmq用戶并授權

[root@localhost ~]#? rabbitmqctl add_user openstack openstack

Creating user"openstack" ...

[root@localhost ~]#rabbitmqctl set_permissions openstack".*" ".*" ".*"

Setting permissions for user"openstack" in vhost "/" ...

?

啟用Rabbitmqweb管理插件

[root@localhost ~]#rabbitmq-plugins list

[root@localhost ~]# rabbitmq-pluginsenable rabbitmq_management

The following plugins havebeen enabled:

? mochiweb

? webmachine

? rabbitmq_web_dispatch

? amqp_client

? rabbitmq_management_agent

? rabbitmq_management

Applying pluginconfiguration to rabbit@localhost... started 6 plugins.

?

重啟Rabbitmq

[root@localhost ~]# systemctlrestart rabbitmq-server.service

?

查看Rabbit的端口,其中5672是服務端口,15672web管理端口,25672是做集群的端口

[root@localhost ~]# netstat -lntup |grep 5672

tcp??????? 0?????0 0.0.0.0:15672??????????0.0.0.0:*?????????????? LISTEN????? 6984/beam??????????

tcp??????? 0?????0 0.0.0.0:25672??????????0.0.0.0:*?????????????? LISTEN????? 6984/beam??????????

tcp6?????? 0?????0 :::5672????????????????:::*???????????????????LISTEN????? 6984/beam??

?

?

登陸http://192.168.1.30:15672?(用戶名:guest密碼:guest

http://192.168.1.30:15672/#/users

openstack


update this user


密碼中輸入:openstackTags: administrator


再登陸http://192.168.1.30:15672(用戶名:openstack密碼:openstack

現在已經有了2個用戶可以登陸


?

若想要監控Rabbit,即可使用下圖中的API



?

?

?

Keystone

yum install openstack-keystonehttpd mod_wsgi memcached python-memcached -y

?

修改keystone的配置文件

vi /etc/keystone/keystone.conf

[DEFAULT]

admin_token= 7fff823bda267b2db6cc?? (通過openssl rand -hex 10產生的隨機數)(用作無用戶時,創建用戶來鏈接,此內容使用openssl隨機產生)

[database]

#Deprecated group/name - [sql]/connection

#connection = <None>

connection =mysql://keystone:keystone@192.168.1.30/keystone

(用作鏈接數據庫,三個keysthone分別為keystone組件,keystone用戶名,mysql中的keysthone庫名)

[memcache]

servers = 192.168.1.30:11211

[token]

provider = uuid

driver = memcache

[revoke]

driver = sql

# DEPRECATED: If set tofalse, the logging level will be set to WARNING instead

# of the default INFO level. (boolean value)

# This option is deprecatedfor removal.

# Its value may be silentlyignored in the future.

verbose = true

?

[root@linux-node2 keystone]#grep? '^[a-z]'/etc/keystone/keystone.conf

admin_token =7fff823bda267b2db6cc

verbose= true

connection =mysql://keystone:keystone@192.168.1.30/keystone

servers = 192.168.1.30:11211

driver = sql

provider = uuid

driver = memcache

?

?

切換到keystone用戶,導入keystoe數據庫

[root@localhost ~]#su -s /bin/sh -c "keystone-manage db_sync" keystone(因為keystone程序啟動時需要keystone用戶寫入到該keystone.log文件,如果用root執行,這里keystone程序就不能以keystone用戶權限寫入到該log文件,以至于程序無法啟動。)

?

?

[root@localhost ~]#cd /var/log/keystone/

[root@localhost keystone]# ll

total 8

-rw-r--r--. 1 keystonekeystone 6754 Nov? 3 08:26 keystone.log

?

[root@localhost keystone]# mysql-h 192.168.1.30 -u keystone -pkeystone

MariaDB [(none)]> use keystone;

Database changed

MariaDB [keystone]> showtables;

+------------------------+

| Tables_in_keystone???? |

+------------------------+

| access_token?????????? |

| assignment???????????? |

| config_register??????? |

| consumer?????????????? |

| credential???????????? |

| endpoint?????????????? |

| endpoint_group???????? |

| federated_user???????? |

| federation_protocol??? |

| group????????????????? |

| id_mapping???????????? |

| identity_provider????? |

| idp_remote_ids???????? |

| implied_role?????????? |

| local_user???????????? |

| mapping??????????????? |

| migrate_version??????? |

| nonlocal_user????????? |

| password?????????????? |

| policy???????????????? |

| policy_association???? |

| project??????????????? |

| project_endpoint?????? |

| project_endpoint_group |

| region???????????????? |

| request_token????????? |

| revocation_event?????? |

| role?????????????????? |

| sensitive_config?????? |

| service??????????????? |

| service_provider?????? |

| token????????????????? |

| trust????????????????? |

| trust_role???????????? |

| user???????? ??????????|

| user_group_membership? |

| user_option??????????? |

| whitelisted_config???? |

+------------------------+

38 rows in set (0.00 sec)

?

?

如果數據庫出問題,可以重置

刪除數據庫(這里刪除會和表一起全部刪除)

mysql -h 192.168.1.30 -u keystone -pkeystone

MariaDB[(none)]>dropdatabase keystone;

然后創建數據庫(這里只是創建一個數據名字,并沒有實際的表)

MariaDB[(none)]>createdatabase keystone;

MariaDB[(none)]> quit

?

同步keystone

root@controller1:~#keystone-managedb_sync;

重置完畢

如果數據庫同步后沒數據,執行以下

[root@localhostyum.repos.d]# mysql-uroot-p123456

CREATE DATABASEkeystone;

GRANT ALLPRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone.* TO'keystone'@'%' IDENTIFIED BY 'keystone';

?

?

添加一個apachewsgi-keystone配置文件,其中5000端口是提供該服務的,35357是為admin提供管理用的

vi /etc/httpd/conf.d/wsgi-keystone.conf

Listen5000

Listen 35357

<VirtualHost *:5000>

??? WSGIDaemonProcess keystone-publicprocesses=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

??? WSGIProcessGroup keystone-public

??? WSGIScriptAlias / /usr/bin/keystone-wsgi-public

??? WSGIApplicationGroup %{GLOBAL}

??? WSGIPassAuthorization On

??? <IfVersion >= 2.4>

????? ErrorLogFormat "%{cu}t %M"

??? </IfVersion>

??? ErrorLog /var/log/httpd/keystone-error.log

??? CustomLog /var/log/httpd/keystone-access.logcombined

??? <Directory /usr/bin>

??????? <IfVersion >= 2.4>

??????????? Require all granted

??????? </IfVersion>

??????? <IfVersion < 2.4>

??????????? Order allow,deny

??????????? Allow from all

??????? </IfVersion>

??? </Directory>

</VirtualHost>

<VirtualHost *:35357>

??? WSGIDaemonProcess keystone-adminprocesses=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

??? WSGIProcessGroup keystone-admin

??? WSGIScriptAlias //usr/bin/keystone-wsgi-admin

??? WSGIApplicationGroup %{GLOBAL}

?? ?WSGIPassAuthorization On

??? <IfVersion >= 2.4>

????? ErrorLogFormat "%{cu}t %M"

??? </IfVersion>

??? ErrorLog /var/log/httpd/keystone-error.log

??? CustomLog /var/log/httpd/keystone-access.logcombined

??? <Directory /usr/bin>

??????? <IfVersion >= 2.4>

??????????? Require all granted

??????? </IfVersion>

??????? <IfVersion < 2.4>

??????????? Order allow,deny

??????????? Allow from all

??????? </IfVersion>

??? </Directory>

</VirtualHost>

?

配置apacheservername,如果不配置servername,會影響keystone服務

vi /etc/httpd/conf/httpd.conf

#ServerName www.example.com:80

ServerName 192.168.1.30:80

?

啟動memcachedhttpdkeystone

[root@localhost etc]#systemctl enable memcached

Created symlink from/etc/systemd/system/multi-user.target.wants/memcached.service to/usr/lib/systemd/system/memcached.service.

[root@localhost etc]# systemctl enable httpd

Created symlink from/etc/systemd/system/multi-user.target.wants/httpd.service to/usr/lib/systemd/system/httpd.service.

[root@localhost etc]# systemctl start httpd

[root@localhost etc]#netstat-ntlp |grep http

tcp6?????? 0????? 0 :::80?????????????????? :::*??????????????????? LISTEN?????

42732/httpd????????

tcp6?????? 0????? 0 :::35357??????????????? :::*??????????????????? LISTEN?????

42732/httpd????????

tcp6?????? 0????? 0 :::5000???????????????? :::*??????????????????? LISTEN?????

42732/httpd?

keystone監聽的兩個端口353575000?? 35357用于管理,5000用于普通用戶。

?

[root@localhost etc]#systemctlstart memcached

?

創建用戶并連接keystone,在這里可以使用兩種方式,通過keystone -help后家參數的方式,或者使用環境變量env的方式,下面就將使用環境變量的方式,分別設置了tokenAPI及控制版本(SOA種很適用)

[root@localhost etc]# export OS_TOKEN=7fff823bda267b2db6cc

[root@localhost etc]# export OS_URL=http://192.168.1.30:35357/v3

[root@localhost etc]# exportOS_IDENTITY_API_VERSION=3

?

創建域‘default

提示:--description是域的描述,最后一個default域的名稱

[root@linux-node1~]#openstackdomain create default

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description |????????????????????????????????? |

| enabled???? | True???????????????????????????? |

| id????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| name??????? | default????????????????????????? |

+-------------+----------------------------------+

?

創建admin項目(project

命令格式:openstack project --domain 域 --description"描述" 項目名

作用:管理所有的云主機

[root@linux-node1 ~]# openstack projectcreate --domain default --description "Admin Project"admin

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | AdminProject??????????????????? |

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | bc6145f01fb849fcb9ea6a7ba1d84ffe |

| is_domain?? | False??????????????????????????? |

| name??????? | admin??????????????????????????? |

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

?

創建admin用戶(user)并設置密碼(生產環境一定設置一個復雜的)

[root@linux-node1 ~]#openstack user create --domain default--password-prompt admin

User Password:

Repeat User Password:

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???????????? | True???????????????????????????? |

| id????????????????? |009d9c1b575c48a598d1700ea42f2870 |

| name??????????????? | admin??????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None???????????????????????????? |

+---------------------+----------------------------------+

或者直接創建密碼

[root@localhost ~]# openstackuser create --domain default --password=admin admin

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 81f258d962ee49ef8814cc6054ce65c0|

| enabled?????? ??????| True???????????????????????????? |

| id????????????????? |89d4ab9674c044928e8ded6ab98b1ebc |

| name??????????????? | admin??????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None??????? ?????????????????????|

+---------------------+----------------------------------+

?

創建admin的角色(role

[root@linux-node1 ~]#openstack role create admin

+-----------+----------------------------------+

| Field???? | Value??????????????????????????? |

+-----------+----------------------------------+

| domain_id | None???????????????????????????? |

| id??????? |be3fa42e824f44758201f249fbd9299d |

| name????? | admin??????????????????????????? |

+-----------+----------------------------------+

?

admin用戶加到admin項目,賦予admin角色,把角色,項目,用戶關聯起來

[root@localhost keystone]#openstack role add --project admin --user admin admin

?

創建一個普通用戶demo,demo項目,角色為普通用戶(uesr),并把它們關聯起來

Openstack中一般的任務我們都應該使用一個沒有太多權限的user來操作。在這里我們創建一個demouser

[root@linux-node1 ~]#openstack project create --domain default--description "Demo Project" demo

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | DemoProject??????????????? ?????|

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | b0bfa350ea0a4af4934a64f646691eed |

| is_domain?? | False??????????????????????????? |

| name??????? | demo???????????????????????? ????|

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

[root@linux-node1 ~]#openstack user create --domain default --password=demo demo

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???????????? | True???????????????????????????? |

| id????????????????? | 4bd21e87bcfa4f7696d26d5e6bfa7592|

| name??????????????? | demo???????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None???????????????????????????? |

+---------------------+----------------------------------+

?

[root@linux-node1 ~]# openstackrole create user

+-----------+----------------------------------+

| Field???? | Value??????????????????????????? |

+-----------+----------------------------------+

| domain_id | None???????????????????????????? |

| id??????? | 874f576d6a864b0589ffbd1150ee35d4 |

| name????? | user???????????????????????????? |

+-----------+----------------------------------+

[root@localhost ~]#openstackrole add --project demo --user demo user

?

創建一個service的項目,此服務用來管理novaneuturnglance等組件的服務

[root@linux-node1 ~]#openstackproject create --domain default --description "Service Project"service

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | ServiceProject????????????????? |

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | 20019fb0d9864523b3015aac8da4a31c |

| is_domain?? | False??????????????????????????? |

| name??????? | service????????????????????????? |

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

?

查看創建的用戶,角色,項目

[root@linux-node1 ~]#openstackuser list

+----------------------------------+-------+

| ID?????????????????????????????? | Name? |

+----------------------------------+-------+

|009d9c1b575c48a598d1700ea42f2870 | admin |

|4bd21e87bcfa4f7696d26d5e6bfa7592 | demo?|

+----------------------------------+-------+

[root@linux-node1 ~]#? openstack projectlist

+----------------------------------+---------+

| ID?????????????????????????????? | Name??? |

+----------------------------------+---------+

|20019fb0d9864523b3015aac8da4a31c | service |

| b0bfa350ea0a4af4934a64f646691eed| demo??? |

|bc6145f01fb849fcb9ea6a7ba1d84ffe | admin??|

+----------------------------------+---------+

[root@linux-node1 ~]#openstack role list

+----------------------------------+-------+

| ID????????????????????????? ?????| Name?|

+----------------------------------+-------+

|874f576d6a864b0589ffbd1150ee35d4 | user?|

|be3fa42e824f44758201f249fbd9299d | admin |

+----------------------------------+-------+

?

注冊keystone服務,雖然keystone本身是搞注冊的,但是自己也需要注冊服務

創建keystone認證

[root@linux-node1 ~]# openstackservice create --name keystone --description "OpenStack Identity"identity

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | OpenStackIdentity?????????????? |

| enabled???? | True???????????????????????????? |

| id????????? | c7688c61f8b3414785528d1aa220d4b9 |

| name??????? | keystone???????????????????????? |

| type??????? | identity???????????????????????? |

+-------------+----------------------------------+

?

分別創建三種類型的endpoint,分別為public:對外可見,internal內部使用,admin管理使用

[root@linux-node1 ~]# openstackendpoint create --region RegionOne identity publichttp://192.168.1.30:5000/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | dacd7ffd8769460289cba8a5b14ecfc4 |

| interface??? | public???????? ??????????????????|

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity?? ??????????????????????|

| url????????? | http://192.168.1.30:5000/v2.0??? |

+--------------+----------------------------------+

[root@linux-node1 ~]#? openstack endpoint create --region RegionOneidentity internal http://192.168.1.30:5000/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | 084e20b52a4f4b8b9c31fe411819b25e |

| interface??? | internal???????????????????????? |

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity???????????????????????? |

| url????????? | http://192.168.1.30:5000/v2.0??? |

+--------------+----------------------------------+

[root@linux-node1 ~]# openstackendpoint create --region RegionOne identity admin http://192.168.1.30:35357/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | f6e6bf61e92e407c85d4a1d336b095eb |

| interface??? | admin??????????????????????????? |

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity???????????????????????? |

| url????????? | http://192.168.1.30:35357/v2.0?? |

+--------------+----------------------------------+

?

查看創建的endpoint

[root@linux-node1 ~]#openstack endpoint list

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

| ID?????????????????????????????? | Region??? | Service Name | Service Type | Enabled |Interface | URL?????????????????? ?????????|

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

|084e20b52a4f4b8b9c31fe411819b25e | RegionOne | keystone???? | identity???? | True???| internal? | http://192.168.1.30:5000/v2.0? |

|dacd7ffd8769460289cba8a5b14ecfc4 | RegionOne | keystone???? | identity???? | True???| public??? | http://192.168.1.30:5000/v2.0? |

|f6e6bf61e92e407c85d4a1d336b095eb | RegionOne | keystone???? | identity???? | True???| admin???? |http://192.168.1.30:35357/v2.0 |

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

?

鏈接到keystone,請求token,在這里由于已經添加了用戶名和密碼,就不在使用token,所有就一定要取消環境變量了

[root@localhost keystone]# unset OS_TOKEN

[root@localhost keystone]#unset OS_URL

?

?

[root@linux-node1 ~]#openstack --os-auth-url http://192.168.1.30:5000/v3 --os-project-domain-iddefault --os-user-domain-id default --os-project-name demo --os-username demouser list

?


?

出的錯誤無法解決。。。。。。。。。。。。。。。。。。。。。。。。

?9673b84d042befff63b598dc2f66e9fe.jpg-wh_


?