建立租户:

root@cloud:~# keystone tenant-create --name=admin
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | 139ea7b2f2444bcd85c327c1671708e1 |
| name | admin |
+-------------+----------------------------------+
root@cloud:~# keystone tenant-create --name=demo
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | 8d428dd34477470d95ad6ad4df0d2dd4 |
| name | demo |
+-------------+----------------------------------+
root@cloud:~# keystone tenant-create --name=service
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | |
| enabled | True |
| id | 9fa61d1bd95d49d4be39658dc5b2a527 |
| name | service |
+-------------+----------------------------------+

查看建立的租户:

root@cloud:~# keystone tenant-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| 139ea7b2f2444bcd85c327c1671708e1 | admin | True |
| 8d428dd34477470d95ad6ad4df0d2dd4 | demo | True |
| 9fa61d1bd95d49d4be39658dc5b2a527 | service | True |
+----------------------------------+---------+---------+
root@cloud:~#

删除租户:

建立一个租户:
root@cloud:~# keystone tenant-create --name=test                     
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |                                  |
|   enabled   |               True               |
|      id     | 2c5fd775f7d049a0a3116ec257c1c106 |
|     name    |               test               |
+-------------+----------------------------------+
查看租户:
root@cloud:~# keystone tenant-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| 139ea7b2f2444bcd85c327c1671708e1 | admin | True |
| 8d428dd34477470d95ad6ad4df0d2dd4 | demo | True |
| 9fa61d1bd95d49d4be39658dc5b2a527 | service | True |
| 2c5fd775f7d049a0a3116ec257c1c106 | test | True |
+----------------------------------+---------+---------+
删除租户:
root@cloud:~# keystone tenant-delete 2c5fd775f7d049a0a3116ec257c1c106
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
root@cloud:~#
查看是否删除:
root@cloud:~# keystone tenant-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 139ea7b2f2444bcd85c327c1671708e1 |  admin  |   True  |
| 8d428dd34477470d95ad6ad4df0d2dd4 |   demo  |   True  |
| 9fa61d1bd95d49d4be39658dc5b2a527 | service |   True  |
+----------------------------------+---------+---------+
root@cloud:~#

建立用户:

建立admin用户:
root@cloud:~# keystone user-create --name=admin --pass=openstack --email=admin@domain.com #建立user用户不需要指定tenant,email不是固定的,根据环境选择
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------+----------------------------------+
| Property | Value |
+----------+----------------------------------+
| email | admin@domain.com |
| enabled | True |
| id | 94123525f8994a42a1d010bf728b4627 |
| name | admin |
| tenantId | |
+----------+----------------------------------+
root@cloud:~# 建立demo用户: 官方文档中这里tenant-id 后面加了=号这里不用等号也行,建议不加,应为后面建立令牌的时候是不加的。
root@cloud:~# keystone user-create --name=demo --pass=openstack --email=demo@domain.com --tenant-id 8d428dd34477470d95ad6ad4df0d2dd4
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------+----------------------------------+
| Property |              Value               |
+----------+----------------------------------+
|  email   |         demo@domain.com          |
| enabled  |               True               |
|    id    | e1e98f7715094798a56f61dd1f85595e |
|   name   |               demo               |
| tenantId | 8d428dd34477470d95ad6ad4df0d2dd4 |
+----------+----------------------------------+
root@cloud:~#

建立角色:

root@cloud:~# keystone role-create --name=admin
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------+----------------------------------+
| Property | Value |
+----------+----------------------------------+
| id | 844d47b695c04c74bc8799b41450dc90 |
| name | admin |
+----------+----------------------------------+
root@cloud:~# keystone role-create --name=Member
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------+----------------------------------+
| Property | Value |
+----------+----------------------------------+
| id | 99643e947abf45f280f39ab06a9ff858 |
| name | Member |
+----------+----------------------------------+
root@cloud:~#

为用户在租户中添加角色:

先查看相应的ID
root@cloud:~# keystone user-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+-------+---------+------------------+
| id | name | enabled | email |
+----------------------------------+-------+---------+------------------+
| 94123525f8994a42a1d010bf728b4627 | admin | True | admin@domain.com |
| e1e98f7715094798a56f61dd1f85595e | demo | True | demo@domain.com |
+----------------------------------+-------+---------+------------------+
root@cloud:~# keystone tenant-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+---------+---------+
| id | name | enabled |
+----------------------------------+---------+---------+
| 139ea7b2f2444bcd85c327c1671708e1 | admin | True |
| 8d428dd34477470d95ad6ad4df0d2dd4 | demo | True |
| 9fa61d1bd95d49d4be39658dc5b2a527 | service | True |
+----------------------------------+---------+---------+
root@cloud:~# keystone role-list
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+----------------------------------+----------+
| id | name |
+----------------------------------+----------+
| 99643e947abf45f280f39ab06a9ff858 | Member |
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
| 844d47b695c04c74bc8799b41450dc90 | admin |
+----------------------------------+----------+
为用户在租户中添加角色:
root@cloud:~#
root@cloud:~# keystone user-role-add --user-id 94123525f8994a42a1d010bf728b4627 --tenant-id 139ea7b2f2444bcd85c327c1671708e1 --role-id 844d47b695c04c74bc8799b41450dc90
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
root@cloud:~#
注意role指定的是Member角色
root@cloud:~# keystone user-role-add --tenant-id 8d428dd34477470d95ad6ad4df0d2dd4 --user-id e1e98f7715094798a56f61dd1f85595e --role-id 99643e947abf45f280f39ab06a9ff858
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
root@cloud:~#

服务以及端口的建立:

root@cloud:~# keystone service-create --name nova --type compute --description 'OpenStack Compute Service'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack Compute Service |
| id | 50195c63e78749c4bfb0c4da8a121033 |
| name | nova |
| type | compute |
+-------------+----------------------------------+
root@cloud:~# keystone service-create --name cinder --type volume --description 'OpenStack Volume Service'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack Volume Service |
| id | 09dd98bd962b4e61b4377ba70a5d9c69 |
| name | cinder |
| type | volume |
+-------------+----------------------------------+
root@cloud:~# keystone service-create --name glance --type image --description 'OpenStack Image Service'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack Image Service |
| id | e0ef8e829b914147b6c49d281e4817db |
| name | glance |
| type | image |
+-------------+----------------------------------+
root@cloud:~# keystone service-create --name keystone --type identity --description 'OpenStack Identity'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack Identity |
| id | 9ccb0db9159648d89f276527c339cc40 |
| name | keystone |
| type | identity |
+-------------+----------------------------------+
root@cloud:~# keystone service-create --name ec2 --type ec2 --description 'OpenStack EC2 service'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack EC2 service |
| id | d2738dff2cd54615b7b2002081e21ff9 |
| name | ec2 |
| type | ec2 |
+-------------+----------------------------------+
root@cloud:~# keystone service-create --name quantum --type network --description 'OpenStack Networking service'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
| Property | Value |
+-------------+----------------------------------+
| description | OpenStack Networking service |
| id | 8b3f86f20bf146068b898aac0dd3334f |
| name | quantum |
| type | network |
+-------------+----------------------------------+
root@cloud:~#

建立endpoint:

root@cloud:~# keystone endpoint-create --region RegionOne --service-id 50195c63e78749c4bfb0c4da8a121033 --publicurl 'http://10.10.10.10:8774/v2/$(tenant_id)s' --adminurl 'http://10.10.10.10:8774/v2/$(tenant_id)s'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+------------------------------------------+
| Property | Value |
+-------------+------------------------------------------+
| adminurl | http://10.10.10.10:8774/v2/$(tenant_id)s |
| id | 520470e44d7a4bf088a93beb000a6f6b |
| internalurl | |
| publicurl | http://10.10.10.10:8774/v2/$(tenant_id)s |
| region | RegionOne |
| service_id | 50195c63e78749c4bfb0c4da8a121033 |
+-------------+------------------------------------------+
root@cloud:~#
root@cloud:~# keystone endpoint-create --region RegionOne --service-id 9ccb0db9159648d89f276527c339cc40 --publicurl 'http://10.10.10.10:5000/v2.0' --adminurl 'http://10.10.10.10:35357/v2.0' --internalurl 'http://10.10.10.10:5000/v2.0'
WARNING: Bypassing authentication using a token & endpoint (authentication credentials are being ignored).
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
|   adminurl  |  http://10.10.10.10:35357/v2.0   |
|      id     | 59f4ccf564ce47fe8b141692288cb497 |
| internalurl |   http://10.10.10.10:5000/v2.0   |
|  publicurl  |   http://10.10.10.10:5000/v2.0   |
|    region   |            RegionOne             |
|  service_id | 9ccb0db9159648d89f276527c339cc40 |
+-------------+----------------------------------+
root@cloud:~#

其他的端口建议在安装一个服务之后再建立,这样呢个将错误降低到最低。

keystone 手动建立租户,用户,角色,服务,端口的更多相关文章

  1. keystone 域-项目-用户-角色

    https://docs.openstack.org/keystone/latest/  官方文档 domain是认证边界,项目.用户属于域,然后通过角色把用户和项目关联起来.  openstack  ...

  2. Oracle只读用户角色的建立

    授予某模式下对象读权限给角色,就可以建立Oracle只读用户角色,下文对该方法的实现步骤作了详细的介绍,供您参考学习. 下面为您介绍的是Oracle只读用户角色的建立方法,该方法供您参考,如果您在Or ...

  3. 邮件服务端口 port 25、109、110、143、465、995、993

    邮件服务端口 port 25.109.110.143.465.995.993   25端口(SMTP):25端口为SMTP(Simple Mail TransferProtocol,简单邮件传输协议) ...

  4. Windows使用telnet验证服务端口是否通

    使用telnet指令时,Windows需要开启Telnet服务. telnet不通的情况: a.端口对应的服务没启动,或者启动了服务端口不是对应的测试端口. b.端口受限不能访问. 以下内容转自:ht ...

  5. 七天学会ASP.NET MVC (五)——Layout页面使用和用户角色管理

    系列文章 七天学会ASP.NET MVC (一)——深入理解ASP.NET MVC 七天学会ASP.NET MVC (二)——ASP.NET MVC 数据传递 七天学会ASP.NET MVC (三)— ...

  6. 将Apache手动安装成Windows的服务

    将Apache手动安装成Windows的服务 可以选择在安装Apache时自动将其安装为一个服务.如果选择"for all users",那么Apache将会被安装为服务. 如果选 ...

  7. [转]扩展RBAC用户角色权限设计方案

    原文地址:http://www.iteye.com/topic/930648 RBAC(Role-Based Access Control,基于角色的访问控制),就是用户通过角色与权限进行关联.简单地 ...

  8. 扩展RBAC用户角色权限设计方案

    RBAC(Role-Based Access Control,基于角色的访问控制),就是用户通过角色与权限进行关联.简单地说,一个用户拥有若干角色,每一个角色拥有若干权限.这样,就构造成“用户-角色- ...

  9. Socket服务端口长连接最多能支持多少?

    答案是无限的.视服务端的资源而不同. 以前一直认为服务端在Accept客户端连接后,会开启一个新的端口与客户端建立链路,但这是错误的.事实上,一个连路是由Server IP+server Port + ...

随机推荐

  1. Python 基础篇:字符编码、函数

    字符编码 在python2默认编码是ASCII, python3里默认是utf-8 unicode 分为 utf-32(占4个字节),utf-16(占两个字节),utf-8(占1-4个字节), so ...

  2. DBMS_SCHEDULER and DBMS_JOB

    引用原文:http://foolraty.iteye.com/blog/1107803 For DBMS_JOB usage:To find out more information about th ...

  3. ColorDialog组件设置字体颜色

    1.设置颜色 private void button4_Click(object sender, EventArgs e) { this.colorDialog1.ShowDialog(); this ...

  4. android报表图形引擎(AChartEngine)demo解析与源码

    AchartEngine支持多种图表样式,本文介绍两种:线状表和柱状表. AchartEngine有两种启动的方式:一种是通过ChartFactory.get***View()方式来直接获取到view ...

  5. hdu 3303 Harmony Forever (线段树 + 抽屉原理)

    http://acm.hdu.edu.cn/showproblem.php?pid=3303 Harmony Forever Time Limit: 20000/10000 MS (Java/Othe ...

  6. Delphi XE10让android的界面设计摆脱繁杂

    设计一个选项卡. 大体图样: 1.创建一个multi_Device_Application;2.在form上放一个Rectangle1,设置align为top.设置fill属性的kind为Gradie ...

  7. java.sql.SQLException: Io 异常: Connection refused(DESCRIPTION=(TMP=)(VSNNUM=186646784)(ERR=12505)(ERR

    dbc 链接orcal出错 java.sql.SQLException: Io 异常: Connection refused(DESCRIPTION=(TMP=)(VSNNUM=186646784)( ...

  8. HDU 1098 Ignatius's puzzle

    http://acm.hdu.edu.cn/showproblem.php?pid=1098 题意 :输入一个K,让你找一个a,使得f(x)=5*x^13+13*x^5+k*a*x这个f(x)%65等 ...

  9. easyui源码翻译1.32--ComboTree(树形下拉框)

    前言 扩展自$.fn.combo.defaults和$.fn.tree.defaults.使用$.fn.combotree.defaults重写默认值对象.下载该插件翻译源码 树形下拉框结合选择控件和 ...

  10. ssh 密钥详解

    ssh 无密码登录要使用公钥与私钥.linux下可以用用ssh-keygen生成公钥/私钥对,下面我以CentOS为例. 有机器A(192.168.1.155),B(192.168.1.181).现想 ...