keystone服務只需安裝在控制節點上，

創建 keystone 資料庫

root@controller:~# mysql
Welcome to the MariaDB monitor.  Commands end with ; or \g.
Your MariaDB connection id is 40
Server version: 10.0.38-MariaDB-0ubuntu0.16.04.1 Ubuntu 16.04

Copyright (c) 2000, 2018, Oracle, MariaDB Corporation Ab and others.

Type 'help;' or '\h' for help. Type '\c' to clear the current input statement.

# 添加資料庫
MariaDB [(none)]> create database keystone;
Query OK, 1 row affected (0.00 sec)

# 創建keystone用戶，并授權keystone資料庫
MariaDB [(none)]> grant all privileges on keystone.* to keystone@'localhost' identified by 'root';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> grant all privileges on keystone.* to keystone@'%' identified by 'root';
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> flush privileges;
Query OK, 0 rows affected (0.00 sec)

MariaDB [(none)]> exit
Bye

安裝keystone軟體包

root@controller:~# apt install keystone python-openstackclient apache2 libapache2-mod-wsgi python-oauth2client -y

配置keystone

root@controller:~# vi /etc/keystone/keystone.conf

# 第606行，取消注釋并添加控制節點IP

# Memcache servers in the format of "host:port". (dogpile.cache.memcache and
# oslo_cache.memcache_pool backends only). (list value)
memcache_servers = 10.0.0.7:11211


# 第740行，取消注釋并修改資料庫連接資訊
# Deprecated group/name - [DATABASE]/sql_connection
# Deprecated group/name - [sql]/connection
connection = mysql+pymysql://keystone:[email protected]/keystone


# 第2891行，添加以下資訊
[token]
provider = fernet

# 保存退出

初始化資料庫

root@controller:~# su -s /bin/bash keystone -c "keystone-manage db_sync"

初始化fernet密鑰

root@controller:~# keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
root@controller:~# keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

啟動keystone服務（所有的密碼都設定為root）

root@controller:~# keystone-manage bootstrap --bootstrap-password root \
--bootstrap-admin-url http://10.0.0.7:5000/v3/ \
--bootstrap-internal-url http://10.0.0.7:5000/v3/ \
--bootstrap-public-url http://10.0.0.7:5000/v3/ \
--bootstrap-region-id RegionOne

配置Apache httpd服務

root@controller:~# vi /etc/apache2/apache2.conf

# 第70行，設定主機名
#ServerRoot "/etc/apache2"
ServerName controller

# 保存退出

重啟服務

root@controller:~# service apache2 restart

配置環境變數

添加環境變數檔案

root@controller:~# vi ~/keystonerc

# 添加以下內容，并保存退出
export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default
export OS_PROJECT_NAME=admin
export OS_USERNAME=admin
export OS_PASSWORD=root
export OS_AUTH_URL=http://10.0.0.7:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
export PS1='\u@\h \W(keystone)\$ '

引入環境變數

root@controller:~# . keystonerc 
root@controller ~(keystone)# 

添加一個專案

root@controller ~(keystone)# openstack project create --domain default --description "Service Project" service
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | Service Project                  |
| domain_id   | default                          |
| enabled     | True                             |
| id          | 2fae0cd7579441f88cab61f4291bfd17 |
| is_domain   | False                            |
| name        | service                          |
| parent_id   | default                          |
| tags        | []                               |
+-------------+----------------------------------+

驗證配置

root@controller ~(keystone)# openstack project list
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 2fae0cd7579441f88cab61f4291bfd17 | service |
| 460e4247a8984b2cbf1b35c3da7e6708 | admin   |
+----------------------------------+---------+

參考

• Server World
• DennisCai's blog

標籤：其他

上一篇：1. 環境準備 — OpenStack Queens 三節點部署

下一篇：labelme安裝問題求解！