OpenStack运维介绍及Keystone组件安装

[root@master01 ~]# cat /etc/hosts
127.0.0.1   localhost localhost.localdomain localhost4 localhost4.localdomain4
::1         localhost localhost.localdomain localhost6 localhost6.localdomain6
10.1.1.100 master01 master01.boysec.cn
10.1.1.110 node01 node01.boysec.cn

# 安装chrony
yum -y install chrony
# 编辑“/etc/chrony.conf”文件并在你的环境需要的情况下增加、修改或者删除这些键值：
[root@master01 ~]# cat /etc/chrony.conf
# Please consider joining the pool (http://www.pool.ntp.org/join.html).
server ntp0.aliyun.com iburst

# 启动服务
systemctl enable chronyd.service
systemctl start chronyd.service

subscription-manager repos --enable=rhel-7-server-optional-rpms \
  --enable=rhel-7-server-extras-rpms --enable=rhel-7-server-rh-common-rpms

# 这里可以选择自己需要版本
yum install centos-release-openstack-train

yum install mariadb mariadb-server python-PyMySQL

[mysqld]
bind-address = 10.1.1.100

default-storage-engine = innodb
innodb_file_per_table = on
max_connections = 4096
collation-server = utf8_general_ci
character-set-server = utf8

systemctl enable mysql.service
systemctl start mysql.service

yum install rabbitmq-server

systemctl enable rabbitmq-server.service
systemctl start rabbitmq-server.service

rabbitmqctl add_user openstack RABBIT_PASS

# Creating user "openstack" ...
# 查看用户
rabbitmqctl list_users
# Listing users
# openstack       []
# guest   [administrator]

rabbitmqctl set_permissions openstack ".*" ".*" ".*"

# Setting permissions for user "openstack" in vhost "/" ...
[root@master01 ~]# rabbitmqctl list_user_permissions openstack
Listing permissions for user "openstack"
/       .*      .*      .*

# 查看需要启动的服务
rabbitmq-plugins list

# 开启图形化界面
rabbitmq-plugins enable rabbitmq_management

# 访问
http://10.1.1.100:15672/

yum install memcached python-memcached

[root@master01 ~]# vim /etc/sysconfig/memcached 
PORT="11211"
USER="memcached"
MAXCONN="1024"
CACHESIZE="64"
OPTIONS="-l 127.0.0.1,10.1.1.100"

systemctl enable memcached.service
systemctl start memcached.service

mysql -u root -p
CREATE DATABASE keystone;
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'localhost' \
IDENTIFIED BY '123456';
GRANT ALL PRIVILEGES ON keystone.* TO 'keystone'@'%' \
IDENTIFIED BY '123456';

yum install openstack-keystone apache2-mod_wsgi

[root@master01 ~]# cp /etc/keystone/keystone.conf{,.bak}
[root@master01 ~]# grep -Ev "^$|#" /etc/keystone/keystone.conf.bak > /etc/keystone/keystone.conf
[root@master01 ~]# cat /etc/keystone/keystone.conf
[DEFAULT]
[application_credential]
[assignment]
[auth]
[cache]
[catalog]
[cors]
[credential]
[database]
connection = mysql+pymysql://keystone:123456@master01.boysec.cn/keystone
[domain_config]
[endpoint_filter]
[endpoint_policy]
[eventlet_server]
[federation]
[fernet_receipts]
[fernet_tokens]
[healthcheck]
[identity]
[identity_mapping]
[jwt_tokens]
[ldap]
[memcache]
[oauth1]
[oslo_messaging_amqp]
[oslo_messaging_kafka]
[oslo_messaging_notifications]
[oslo_messaging_rabbit]
[oslo_middleware]
[oslo_policy]
[policy]
[profiler]
[receipt]
[resource]
[revoke]
[role]
[saml]
[security_compliance]
[shadow_users]
[token]
provider = fernet
[tokenless_auth]
[totp]
[trust]
[unified_limit]
[wsgi]

su -s /bin/sh -c "keystone-manage db_sync" keystone

keystone-manage fernet_setup --keystone-user keystone --keystone-group keystone
keystone-manage credential_setup --keystone-user keystone --keystone-group keystone

keystone-manage bootstrap --bootstrap-password ADMIN_PASS \
  --bootstrap-admin-url http://master01.boysec.cn:5000/v3/ \
  --bootstrap-internal-url http://master01.boysec.cn:5000/v3/ \
  --bootstrap-public-url http://master01.boysec.cn:5000/v3/ \
  --bootstrap-region-id RegionOne

echo "ServerName master01.boysec.cn" >> /etc/httpd/conf/httpd.conf

ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/

systemctl enable httpd.service
systemctl start httpd.service

cat >> ~/.bashrc << EOF
export OS_USERNAME=admin
export OS_PASSWORD=keystone
export OS_PROJECT_NAME=admin
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_DOMAIN_NAME=Default
export OS_AUTH_URL=http://master01.boysec.cn:5000/v3
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
EOF

[root@master01 ~]# openstack user list
+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| d8cd16895f8d4421975a3e22396af49a | admin     |
+----------------------------------+-----------+