keystone使用命令

使用rpm包安装keystone，配置完成后启动，然后发现数据库中没有任何数据可用，如果要使用keystone,还需要创建租户、用户、角色和endpoints等，以下为创建这些资源的命令.

1.首先导入环境变量：

export OS_SERVICE_TOKEN='asdf39f3276ddcaee7b57789a'

export OS_SERVICE_ENDPOINT='http://10.16.75.87:35357/v2.0/'

2 创建租户

keystone tenant-create --name admin

3 创建用户

keystone user-create --name admin --tenant admin --pass admin --enabled true

4 创建角色

keystone role-create --name admin

5 关联用户和角色

keystone user-role-add --user admin --role admin --tenant admin

6 创建service

keystone service-create --type identity --name keystone --description 'OpenStack Identity Service'

7 创建endpoint

keystone endpoint-create --region RegionOne --service keystone --publicurl http://10.16.75.87:5000/v2.0 --adminurl http://10.16.75.87:35357/v2.0 --internalurl http://10.16.75.87:5000/v2.0
下面为create.sh脚本，供参考：

keystone tenant-create --name services --description 'Tenant for the openstack services'

tenant_id=`keystone tenant-list | grep services | awk '{print $2}'`

keystone user-create --name nova --tenant services --pass iaasiaas

keystone user-create --name neutron --tenant services --pass iaasiaas

keystone user-create --name cinder --tenant services --pass iaasiaas

keystone user-create --name glance --tenant services --pass iaasiaas

keystone user-create --name ceilometer --tenant services --pass iaasiaas

keystone user-create --name manila --tenant services --pass iaasiaas

keystone user-create --name trove --tenant services --pass iaasiaas

keystone user-role-add --user nova --role admin --tenant services

keystone user-role-add --user neutron --role admin --tenant services

keystone user-role-add --user cinder --role admin --tenant services

keystone user-role-add --user glance --role admin --tenant services

keystone user-role-add --user ceilometer --role admin --tenant services

keystone user-role-add --user manila --role admin --tenant services

keystone user-role-add --user trove --role admin --tenant services

keystone service-create --type compute --name nova --description 'Openstack Compute Service'

keystone service-create --type ec2 --name nova_ec2 --description 'EC2 Service'

keystone service-create --type computev3 --name novav3 --description 'Openstack Compute Service v3'

keystone service-create --type network --name neutron --description 'Neutron Networking Service'

keystone service-create --type volume --name cinder --description 'Cinder Service'

keystone service-create --type volumev2 --name cinderv2 --description ' Cinder Service v2'

keystone service-create --type image --name glance --description 'Openstack Image Service'

keystone service-create --type metering --name ceilometer --description 'Openstack Metering Service'

keystone service-create --type database --name trove --description ''

#nova

keystone endpoint-create --region RegionOne --service nova --publicurl "http://cloud.localdomain.net:8774/v2/%(tenant_id)s" --adminurl "http://cloud.localdomain.net:8774/v2/%(tenant_id)s" --internalurl "http://cloud.localdomain.net:8774/v2/%(tenant_id)s"

keystone endpoint-create --region RegionOne --service nova_ec2 --publicurl "http://cloud.localdomain.net:8773/services/Cloud" --adminurl "http://cloud.localdomain.net:8773/services/Cloud" --internalurl "http://cloud.localdomain.net:8773/services/Cloud"

keystone endpoint-create --region RegionOne --service novav3 --publicurl "http://cloud.localdomain.net:8774/v3" --adminurl "http://cloud.localdomain.net:8774/v3" --internalurl "http://cloud.localdomain.net:8774/v3"

#neutron

keystone endpoint-create --region RegionOne --service neutron --publicurl "http://cloud.localdomain.net:9696/" --adminurl "http://cloud.localdomain.net:9696/" --internalurl "http://cloud.localdomain.net:9696/"

#cinder/cinder_v2

keystone endpoint-create --region RegionOne --service cinder --publicurl "http://cloud.localdomain.net:8776/v1/%(tenant_id)s" --adminurl "http://cloud.localdomain.net:8776/v1/%(tenant_id)s" --internalurl "http://cloud.localdomain.net:8776/v1/%(tenant_id)s"

keystone endpoint-create --region RegionOne --service cinderv2 --publicurl "http://cloud.localdomain.net:8776/v2/%(tenant_id)s" --adminurl "http://cloud.localdomain.net:8776/v2/%(tenant_id)s" --internalurl "http://cloud.localdomain.net:8776/v2/%(tenant_id)s"

#glance

keystone endpoint-create --region RegionOne --service glance --publicurl "http://cloud.localdomain.net:9292" --adminurl "http://cloud.localdomain.net:9292" --internalurl "http://cloud.localdomain.net:9292"

#ceilometer

keystone endpoint-create --region RegionOne --service ceilometer --publicurl "http://cloud.localdomain.net:8777" --adminurl "http://cloud.localdomain.net:8777" --internalurl "http://cloud.localdomain.net:8777"

keystone endpoint-create --region RegionOne --service gringotts --publicurl "http://cloud.localdomain.net:8975/v1" --adminurl "http://cloud.localdomain.net:8975/v1" --internalurl "http://cloud.localdomain.net:8975/v1"

keystone endpoint-create --region RegionOne --service manila --publicurl "http://cloud.localdomain.net:8786/v1/%(tenant_id)s" --adminurl "http://cloud.localdomain.net:8786/v1/%(tenant_id)s" --internalurl "http://cloud.localdomain.net:8786/v1/%(tenant_id)s"

keystone endpoint-create --region RegionOne --service ticket --publicurl "http://cloud.localdomain.net:8203/v1" --adminurl "http://cloud.localdomain.net:8203/v1" --internalurl "http://cloud.localdomain.net:8203/v1"

keystone endpoint-create --region RegionOne --service trove --publicurl "http://cloud.localdomain.net:8779/v1.0/%(tenant_id)s" --adminurl "http://cloud.localdomain.net:8779/v1.0/%(tenant_id)s" --internalurl "http://cloud.localdomain.net:8779/v1.0/%(tenant_id)s"