當前位置：首頁 > 编程资源 > 编程问答 >内容正文

编程问答

私有云搭建 OpenStack（centos7.3, centos-release-openstack-ocata）

發(fā)布時間：2023/12/6 编程问答 49 豆豆

生活随笔收集整理的這篇文章主要介紹了私有云搭建 OpenStack（centos7.3, centos-release-openstack-ocata）小編覺得挺不錯的,現(xiàn)在分享給大家,幫大家做個參考.

OpenStack（centos7.3,centos-release-openstack-ocata）

nova：計算節(jié)點

???????? queue：消息隊列，系統(tǒng)瓶頸所在

???????? scheduler：調(diào)度機制

???????? conductor：更新數(shù)據(jù)庫

???????? cert（objectstore）：證書

???????? console：連接端口

???????? consoleauth：連接端口認證

glance：存儲映像文件和硬盤

???????? registry：調(diào)用數(shù)據(jù)庫的接口，檢索接口

???????? database：映像文件的存儲位置等

?????????????????? swift：分布式存儲

neutron：網(wǎng)絡服務，負責接收對網(wǎng)絡的調(diào)用請求

???????? plugins：插件

???????? agents：網(wǎng)絡服務器

cinder：塊存儲

???????? api：接受請求并分配volume

???????? vloume：

???????? database

???????? scheduler：

swift：存儲對象節(jié)點

???????? account：賬號管理

???????? container:容量管理，管理阿布管理

???????? object：對象管理

環(huán)境準備

控制節(jié)點

hostname：linux-node1.oldboyedu.com

ip地址：192.168.1.30

計算節(jié)點：

hostname：linux-node2.oldboyedu.com

ip地址：192.168.1.31

先配置控制節(jié)點192.168.1.30

vi /etc/sysconfig/network-scripts/ifcfg-ens33

BOOTPROTO=static

DEVICE=ens33

NM_CONTROLLLER=yes

IPADDR=192.168.1.30

NETMASK=255.255.255.0

GATEWAY=192.168.1.1

重啟網(wǎng)卡使設置生效

nmcli connection down ens33

nmcli connection up ens33

修改主機名

需要修改兩處：一處是/etc/hostname，另一處是/etc/hosts

[root@localhost ~]# vi /etc/hostname

linux-node1

[root@localhost ~]# systemctlrestart NetworkManager

[root@localhost ~]# hostname

linux-node1

[root@localhost ~]# vi /etc/hosts

192.168.1.30?? linux-node1????? linux-node1.oldboyedu.com

192.168.1.31?? linux-node2????? linux-node2.oldboyedu.com

將上面兩個文件修改完后，并不能立刻生效。如果要立刻生效的話，可以用 hostname your-hostname 作臨時修改，它只是臨時地修改主機名，系統(tǒng)重啟后會恢復原樣的。

hostname linux-node1

安裝時間同步

yum install chrony

[root@localhost ~]# vi /etc/chrony.conf

allow 192.168.0.0/16

設置開機自啟動

[root@localhost ~]# systemctlenable chronyd.service

啟動chronyd

[root@localhost ~]# systemctl start chronyd.service

[root@localhost ~]# timedatectl set-timezone Asia/Shanghai

[root@localhost ~]# date

Thu Nov? 2 16:23:07 CST 2017

關閉 selinux(centos7.3需要改2個地方/etc/sysconfig/selinux和/etc/selinux/config)
sed -i's#SELINUX=enforcing#SELINUX=disabled#g' /etc/sysconfig/selinux

sed -i 's#SELINUX=enforcing#SELINUX=disabled#g' /etc/selinux/config
setenforce 0

getenforce可查看selinux的狀態(tài)

關閉 iptables
systemctlstop firewalld.service
systemctldisable firewalld.service

[root@localhost ~]# cat /etc/redhat-release

CentOS Linux release 7.3.1611 (Core)

升級本地軟件：

[root@localhost ~]# yum update-y

[root@localhost ~]#yum installcentos-release-openstack-liberty -y

Loaded plugins: fastestmirror

epel/x86_64/metalink???????????????????????????????????? | 6.1kB???? 00:00????

epel????????????????????????????????????????????????????| 4.3 kB???? 00:00????

(1/3): epel/x86_64/group_gz??????????????????????????????? | 261 kB?? 00:00????

(2/3): epel/x86_64/updateinfo????????????????????????????? | 842 kB?? 00:01????

(3/3): epel/x86_64/primary_db????????????????????????????? | 6.1 MB?? 00:04????

Loading mirror speeds from cached hostfile

?* base: mirrors.163.com

?* epel: mirrors.ustc.edu.cn

?* extras: mirrors.cn99.com

?* updates: mirrors.163.com

No package centos-release-openstack-liberty available.

Error: Nothing to do

解決：選擇安裝Ocata的yum源（我的噩夢開始了。。。。。。。。。。。。。）

[root@localhost ~]#yum install centos-release-openstack-ocata -y

再升級一遍，以防萬一，防止軟件版本過低。

[root@localhost ~]#yumupgrade -y

驗證yum源是否可用：

[root@localhost ~]#yum repolist

[root@localhost~]#yum install python-openstackclient -y

MySQL

[root@localhost yum.repos.d]# yum install mariadb mariadb-server MySQL-python-y [root@localhostyum.repos.d]# cp /usr/share/mysql/my-medium.cnf /etc/my.cnf

[root@localhostyum.repos.d]# vi /etc/my.cnf

[mysqld]

default-storage-engine= innodb

innodb_file_per_table

collation-server =utf8_general_ci

init-connect = 'SETNAMES utf8'

character-set-server = utf8

[root@localhostyum.repos.d]# systemctl enable mariadb.service

Created symlink from /etc/systemd/system/multi-user.target.wants/mariadb.serviceto /usr/lib/systemd/system/mariadb.service.

[root@localhostyum.repos.d]#systemctlstart mariadb.service

[root@localhostyum.repos.d]# mysql_secure_installation? (一路 y 回車) (設置mysql的密碼123456)

[root@localhostyum.repos.d]# mysql -uroot -p123456

CREATE DATABASE keystone;

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost'IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' IDENTIFIED BY'keystone';

CREATE DATABASE glance;

GRANT ALL PRIVILEGES ONglance.* TO 'glance'@'localhost' IDENTIFIED BY 'glance';

GRANT ALL PRIVILEGES ONglance.* TO 'glance'@'%' IDENTIFIED BY 'glance';

CREATE DATABASE nova;

GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'localhost' IDENTIFIED BY 'nova';

GRANT ALL PRIVILEGES ONnova.* TO 'nova'@'%' IDENTIFIED BY 'nova';

CREATE DATABASE neutron;

GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'localhost' IDENTIFIED BY 'neutron';

GRANT ALL PRIVILEGES ONneutron.* TO 'neutron'@'%' IDENTIFIED BY 'neutron';

CREATE DATABASE cinder;

GRANT ALL PRIVILEGES ONcinder.* TO 'cinder'@'localhost' IDENTIFIED BY 'cinder';

GRANT ALL PRIVILEGES ONcinder.* TO 'cinder'@'%' IDENTIFIED BY 'cinder';

安裝RabbitMQ

[root@localhost ~]# yum install rabbitmq-server -y

Error: Package:erlang-erts-18.3.4.4-2.el7.x86_64 (centos-openstack-liberty)

?????????? Requires: lksctp-tools

解決：

[root@localhost ~]# rpm -ivhlksctp-tools-1.0.17-2.el7.x86_64.rpm

[root@localhost ~]# yuminstall rabbitmq-server -y

[root@localhost~]# systemctl enable rabbitmq-server.service???

Created symlink from/etc/systemd/system/multi-user.target.wants/rabbitmq-server.service to/usr/lib/systemd/system/rabbitmq-server.service.

[root@localhost ~]# systemctl start rabbitmq-server.service

[root@localhost ~]# netstat-ntlp

5672是rabbitmq端口號

新建Rabbitmq用戶并授權

[root@localhost ~]#? rabbitmqctl add_user openstack openstack

Creating user"openstack" ...

[root@localhost ~]#rabbitmqctl set_permissions openstack".*" ".*" ".*"

Setting permissions for user"openstack" in vhost "/" ...

啟用Rabbitmq的web管理插件

[root@localhost ~]#rabbitmq-plugins list

[root@localhost ~]# rabbitmq-pluginsenable rabbitmq_management

The following plugins havebeen enabled:

? mochiweb

? webmachine

? rabbitmq_web_dispatch

? amqp_client

? rabbitmq_management_agent

? rabbitmq_management

Applying pluginconfiguration to rabbit@localhost... started 6 plugins.

重啟Rabbitmq

[root@localhost ~]# systemctlrestart rabbitmq-server.service

查看Rabbit的端口，其中5672是服務端口，15672是web管理端口，25672是做集群的端口

[root@localhost ~]# netstat -lntup |grep 5672

tcp??????? 0?????0 0.0.0.0:15672??????????0.0.0.0:*?????????????? LISTEN????? 6984/beam??????????

tcp??????? 0?????0 0.0.0.0:25672??????????0.0.0.0:*?????????????? LISTEN????? 6984/beam??????????

tcp6?????? 0?????0 :::5672????????????????:::*???????????????????LISTEN????? 6984/beam??

登陸http://192.168.1.30:15672?（用戶名：guest密碼：guest）

http://192.168.1.30:15672/#/users

點openstack

點update this user

密碼中輸入：openstack，Tags: administrator

再登陸http://192.168.1.30:15672（用戶名：openstack密碼：openstack）

現(xiàn)在已經(jīng)有了2個用戶可以登陸

若想要監(jiān)控Rabbit，即可使用下圖中的API

Keystone

yum install openstack-keystonehttpd mod_wsgi memcached python-memcached -y

修改keystone的配置文件

vi /etc/keystone/keystone.conf

[DEFAULT]

admin_token= 7fff823bda267b2db6cc?? (通過openssl rand -hex 10產(chǎn)生的隨機數(shù))(用作無用戶時，創(chuàng)建用戶來鏈接，此內(nèi)容使用openssl隨機產(chǎn)生)

[database]

#Deprecated group/name - [sql]/connection

#connection = <None>

connection =mysql://keystone:keystone@192.168.1.30/keystone

(用作鏈接數(shù)據(jù)庫，三個keysthone分別為keystone組件，keystone用戶名，mysql中的keysthone庫名)

[memcache]

servers = 192.168.1.30:11211

[token]

provider = uuid

driver = memcache

[revoke]

driver = sql

# DEPRECATED: If set tofalse, the logging level will be set to WARNING instead

# of the default INFO level. (boolean value)

# This option is deprecatedfor removal.

# Its value may be silentlyignored in the future.

verbose = true

[root@linux-node2 keystone]#grep? '^[a-z]'/etc/keystone/keystone.conf

admin_token =7fff823bda267b2db6cc

verbose= true

connection =mysql://keystone:keystone@192.168.1.30/keystone

servers = 192.168.1.30:11211

driver = sql

provider = uuid

driver = memcache

切換到keystone用戶，導入keystoe數(shù)據(jù)庫

[root@localhost ~]#su -s /bin/sh -c "keystone-manage db_sync" keystone（因為keystone程序啟動時需要以keystone用戶寫入到該keystone.log文件，如果用root執(zhí)行，這里keystone程序就不能以keystone用戶權限寫入到該log文件，以至于程序無法啟動。）

[root@localhost ~]#cd /var/log/keystone/

[root@localhost keystone]# ll

total 8

-rw-r--r--. 1 keystonekeystone 6754 Nov? 3 08:26 keystone.log

[root@localhost keystone]# mysql-h 192.168.1.30 -u keystone -pkeystone

MariaDB [(none)]> use keystone;

Database changed

MariaDB [keystone]> showtables;

+------------------------+

| Tables_in_keystone???? |

+------------------------+

| access_token?????????? |

| assignment???????????? |

| config_register??????? |

| consumer?????????????? |

| credential???????????? |

| endpoint?????????????? |

| endpoint_group???????? |

| federated_user???????? |

| federation_protocol??? |

| group????????????????? |

| id_mapping???????????? |

| identity_provider????? |

| idp_remote_ids???????? |

| implied_role?????????? |

| local_user???????????? |

| mapping??????????????? |

| migrate_version??????? |

| nonlocal_user????????? |

| password?????????????? |

| policy???????????????? |

| policy_association???? |

| project??????????????? |

| project_endpoint?????? |

| project_endpoint_group |

| region???????????????? |

| request_token????????? |

| revocation_event?????? |

| role?????????????????? |

| sensitive_config?????? |

| service??????????????? |

| service_provider?????? |

| token????????????????? |

| trust????????????????? |

| trust_role???????????? |

| user???????? ??????????|

| user_group_membership? |

| user_option??????????? |

| whitelisted_config???? |

+------------------------+

38 rows in set (0.00 sec)

如果數(shù)據(jù)庫出問題，可以重置

刪除數(shù)據(jù)庫（這里刪除會和表一起全部刪除）

mysql -h 192.168.1.30 -u keystone -pkeystone

MariaDB[(none)]>dropdatabase keystone;

然后創(chuàng)建數(shù)據(jù)庫（這里只是創(chuàng)建一個數(shù)據(jù)名字，并沒有實際的表）

MariaDB[(none)]>createdatabase keystone;

MariaDB[(none)]> quit；

同步keystone；

root@controller1:~#keystone-managedb_sync;

重置完畢

如果數(shù)據(jù)庫同步后沒數(shù)據(jù)，執(zhí)行以下

[root@localhostyum.repos.d]# mysql-uroot-p123456

CREATE DATABASEkeystone;

GRANT ALLPRIVILEGES ON keystone.* TO 'keystone'@'localhost' IDENTIFIED BY 'keystone';

GRANT ALL PRIVILEGES ON keystone.* TO'keystone'@'%' IDENTIFIED BY 'keystone';

添加一個apache的wsgi-keystone配置文件，其中5000端口是提供該服務的，35357是為admin提供管理用的

vi /etc/httpd/conf.d/wsgi-keystone.conf

Listen5000

Listen 35357

??? WSGIDaemonProcess keystone-publicprocesses=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

??? WSGIProcessGroup keystone-public

??? WSGIScriptAlias / /usr/bin/keystone-wsgi-public

??? WSGIApplicationGroup %{GLOBAL}

??? WSGIPassAuthorization On

??? <IfVersion >= 2.4>

????? ErrorLogFormat "%{cu}t %M"

??? </IfVersion>

??? ErrorLog /var/log/httpd/keystone-error.log

??? CustomLog /var/log/httpd/keystone-access.logcombined

??? <Directory /usr/bin>

??????? <IfVersion >= 2.4>

??????????? Require all granted

??????? </IfVersion>

??????? <IfVersion < 2.4>

??????????? Order allow,deny

??????????? Allow from all

??????? </IfVersion>

??? </Directory>

</VirtualHost>

??? WSGIDaemonProcess keystone-adminprocesses=5 threads=1 user=keystone group=keystone display-name=%{GROUP}

??? WSGIProcessGroup keystone-admin

??? WSGIScriptAlias //usr/bin/keystone-wsgi-admin

??? WSGIApplicationGroup %{GLOBAL}

?? ?WSGIPassAuthorization On

??? <IfVersion >= 2.4>

????? ErrorLogFormat "%{cu}t %M"

??? </IfVersion>

??? ErrorLog /var/log/httpd/keystone-error.log

??? CustomLog /var/log/httpd/keystone-access.logcombined

??? <Directory /usr/bin>

??????? <IfVersion >= 2.4>

??????????? Require all granted

??????? </IfVersion>

??????? <IfVersion < 2.4>

??????????? Order allow,deny

??????????? Allow from all

??????? </IfVersion>

??? </Directory>

</VirtualHost>

配置apache的servername,如果不配置servername，會影響keystone服務

vi /etc/httpd/conf/httpd.conf

#ServerName www.example.com:80

ServerName 192.168.1.30:80

啟動memcached，httpd，keystone

[root@localhost etc]#systemctl enable memcached

Created symlink from/etc/systemd/system/multi-user.target.wants/memcached.service to/usr/lib/systemd/system/memcached.service.

[root@localhost etc]# systemctl enable httpd

Created symlink from/etc/systemd/system/multi-user.target.wants/httpd.service to/usr/lib/systemd/system/httpd.service.

[root@localhost etc]# systemctl start httpd

[root@localhost etc]#netstat-ntlp |grep http

tcp6?????? 0????? 0 :::80?????????????????? :::*??????????????????? LISTEN?????

42732/httpd????????

tcp6?????? 0????? 0 :::35357??????????????? :::*??????????????????? LISTEN?????

42732/httpd????????

tcp6?????? 0????? 0 :::5000???????????????? :::*??????????????????? LISTEN?????

42732/httpd?

keystone監(jiān)聽的兩個端口35357和5000。?? 35357用于管理,5000用于普通用戶。

[root@localhost etc]#systemctlstart memcached

創(chuàng)建用戶并連接keystone，在這里可以使用兩種方式，通過keystone -help后家參數(shù)的方式，或者使用環(huán)境變量env的方式，下面就將使用環(huán)境變量的方式,分別設置了token，API及控制版本（SOA種很適用）

[root@localhost etc]# export OS_TOKEN=7fff823bda267b2db6cc

[root@localhost etc]# export OS_URL=http://192.168.1.30:35357/v3

[root@localhost etc]# exportOS_IDENTITY_API_VERSION=3

創(chuàng)建域‘default’：

提示：--description是域的描述，最后一個default是域的名稱

[root@linux-node1~]#openstackdomain create default

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description |????????????????????????????????? |

| enabled???? | True???????????????????????????? |

| id????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| name??????? | default????????????????????????? |

+-------------+----------------------------------+

創(chuàng)建admin項目（project）

命令格式：openstack project --domain 域 --description"描述" 項目名

作用：管理所有的云主機

[root@linux-node1 ~]# openstack projectcreate --domain default --description "Admin Project"admin

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | AdminProject??????????????????? |

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | bc6145f01fb849fcb9ea6a7ba1d84ffe |

| is_domain?? | False??????????????????????????? |

| name??????? | admin??????????????????????????? |

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

創(chuàng)建admin用戶（user）并設置密碼（生產(chǎn)環(huán)境一定設置一個復雜的）

[root@linux-node1 ~]#openstack user create --domain default--password-prompt admin

User Password:

Repeat User Password:

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???????????? | True???????????????????????????? |

| id????????????????? |009d9c1b575c48a598d1700ea42f2870 |

| name??????????????? | admin??????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None???????????????????????????? |

+---------------------+----------------------------------+

或者直接創(chuàng)建密碼

[root@localhost ~]# openstackuser create --domain default --password=admin admin

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 81f258d962ee49ef8814cc6054ce65c0|

| enabled?????? ??????| True???????????????????????????? |

| id????????????????? |89d4ab9674c044928e8ded6ab98b1ebc |

| name??????????????? | admin??????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None??????? ?????????????????????|

+---------------------+----------------------------------+

創(chuàng)建admin的角色（role）

[root@linux-node1 ~]#openstack role create admin

+-----------+----------------------------------+

| Field???? | Value??????????????????????????? |

+-----------+----------------------------------+

| domain_id | None???????????????????????????? |

| id??????? |be3fa42e824f44758201f249fbd9299d |

| name????? | admin??????????????????????????? |

+-----------+----------------------------------+

把admin用戶加到admin項目，賦予admin角色，把角色，項目，用戶關聯(lián)起來

[root@localhost keystone]#openstack role add --project admin --user admin admin

創(chuàng)建一個普通用戶demo,demo項目，角色為普通用戶（uesr），并把它們關聯(lián)起來

在Openstack中一般的任務我們都應該使用一個沒有太多權限的user來操作。在這里我們創(chuàng)建一個demouser。

[root@linux-node1 ~]#openstack project create --domain default--description "Demo Project" demo

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | DemoProject??????????????? ?????|

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | b0bfa350ea0a4af4934a64f646691eed |

| is_domain?? | False??????????????????????????? |

| name??????? | demo???????????????????????? ????|

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

[root@linux-node1 ~]#openstack user create --domain default --password=demo demo

+---------------------+----------------------------------+

| Field?????????????? | Value??????????????????????????? |

+---------------------+----------------------------------+

| domain_id?????????? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???????????? | True???????????????????????????? |

| id????????????????? | 4bd21e87bcfa4f7696d26d5e6bfa7592|

| name??????????????? | demo???????????????????????????? |

| options???????????? | {}?????????????????????????????? |

| password_expires_at |None???????????????????????????? |

+---------------------+----------------------------------+

[root@linux-node1 ~]# openstackrole create user

+-----------+----------------------------------+

| Field???? | Value??????????????????????????? |

+-----------+----------------------------------+

| domain_id | None???????????????????????????? |

| id??????? | 874f576d6a864b0589ffbd1150ee35d4 |

| name????? | user???????????????????????????? |

+-----------+----------------------------------+

[root@localhost ~]#openstackrole add --project demo --user demo user

創(chuàng)建一個service的項目，此服務用來管理nova，neuturn，glance等組件的服務

[root@linux-node1 ~]#openstackproject create --domain default --description "Service Project"service

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | ServiceProject????????????????? |

| domain_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

| enabled???? | True???????????????????????????? |

| id????????? | 20019fb0d9864523b3015aac8da4a31c |

| is_domain?? | False??????????????????????????? |

| name??????? | service????????????????????????? |

| parent_id?? | 660bc70fb8f046ba8c565b08a5f2dd6c |

+-------------+----------------------------------+

查看創(chuàng)建的用戶,角色，項目

[root@linux-node1 ~]#openstackuser list

+----------------------------------+-------+

| ID?????????????????????????????? | Name? |

+----------------------------------+-------+

|009d9c1b575c48a598d1700ea42f2870 | admin |

|4bd21e87bcfa4f7696d26d5e6bfa7592 | demo?|

+----------------------------------+-------+

[root@linux-node1 ~]#? openstack projectlist

+----------------------------------+---------+

| ID?????????????????????????????? | Name??? |

+----------------------------------+---------+

|20019fb0d9864523b3015aac8da4a31c | service |

| b0bfa350ea0a4af4934a64f646691eed| demo??? |

|bc6145f01fb849fcb9ea6a7ba1d84ffe | admin??|

+----------------------------------+---------+

[root@linux-node1 ~]#openstack role list

+----------------------------------+-------+

| ID????????????????????????? ?????| Name?|

+----------------------------------+-------+

|874f576d6a864b0589ffbd1150ee35d4 | user?|

|be3fa42e824f44758201f249fbd9299d | admin |

+----------------------------------+-------+

注冊keystone服務，雖然keystone本身是搞注冊的，但是自己也需要注冊服務

創(chuàng)建keystone認證

[root@linux-node1 ~]# openstackservice create --name keystone --description "OpenStack Identity"identity

+-------------+----------------------------------+

| Field?????? | Value??????????????????????????? |

+-------------+----------------------------------+

| description | OpenStackIdentity?????????????? |

| enabled???? | True???????????????????????????? |

| id????????? | c7688c61f8b3414785528d1aa220d4b9 |

| name??????? | keystone???????????????????????? |

| type??????? | identity???????????????????????? |

+-------------+----------------------------------+

分別創(chuàng)建三種類型的endpoint,分別為public:對外可見，internal內(nèi)部使用，admin管理使用

[root@linux-node1 ~]# openstackendpoint create --region RegionOne identity publichttp://192.168.1.30:5000/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | dacd7ffd8769460289cba8a5b14ecfc4 |

| interface??? | public???????? ??????????????????|

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity?? ??????????????????????|

| url????????? | http://192.168.1.30:5000/v2.0??? |

+--------------+----------------------------------+

[root@linux-node1 ~]#? openstack endpoint create --region RegionOneidentity internal http://192.168.1.30:5000/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | 084e20b52a4f4b8b9c31fe411819b25e |

| interface??? | internal???????????????????????? |

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity???????????????????????? |

| url????????? | http://192.168.1.30:5000/v2.0??? |

+--------------+----------------------------------+

[root@linux-node1 ~]# openstackendpoint create --region RegionOne identity admin http://192.168.1.30:35357/v2.0

+--------------+----------------------------------+

| Field??????? | Value??????????????????????????? |

+--------------+----------------------------------+

| enabled????? | True???????????????????????????? |

| id?????????? | f6e6bf61e92e407c85d4a1d336b095eb |

| interface??? | admin??????????????????????????? |

| region?????? | RegionOne??????????????????????? |

| region_id??? | RegionOne??????????????????????? |

| service_id?? | c7688c61f8b3414785528d1aa220d4b9 |

| service_name |keystone???????????????????????? |

| service_type |identity???????????????????????? |

| url????????? | http://192.168.1.30:35357/v2.0?? |

+--------------+----------------------------------+

查看創(chuàng)建的endpoint

[root@linux-node1 ~]#openstack endpoint list

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

+----------------------------------+-----------+--------------+--------------+---------+-----------+--------------------------------+

鏈接到keystone，請求token，在這里由于已經(jīng)添加了用戶名和密碼，就不在使用token，所有就一定要取消環(huán)境變量了

[root@localhost keystone]# unset OS_TOKEN

[root@localhost keystone]#unset OS_URL

[root@linux-node1 ~]#openstack --os-auth-url http://192.168.1.30:5000/v3 --os-project-domain-iddefault --os-user-domain-id default --os-project-name demo --os-username demouser list

出的錯誤無法解決。。。。。。。。。。。。。。。。。。。。。。。。

轉(zhuǎn)載于:https://blog.51cto.com/2290153/1980706

總結

以上是生活随笔為你收集整理的私有云搭建 OpenStack（centos7.3, centos-release-openstack-ocata）的全部內(nèi)容，希望文章能夠幫你解決所遇到的問題。

如果覺得生活随笔網(wǎng)站內(nèi)容還不錯，歡迎將生活随笔推薦給好友。