Keystone常用操作演示

一 Service相关的命令（keystone help command）keystone service-list | service-get | service-create | service-delete

[root@controller0 ~]# keystone service-list
+----------------------------------+----------+----------+---------------------------+
|                id                |   name   |   type   |        description        |
+----------------------------------+----------+----------+---------------------------+
| 04555caea1674cc0bc17e69fa0f9ff38 |  glance  |  image   |    Glance Image Service   |
| b8860e4213ef4b828e5c81b1b9e4d0bb | keystone | identity | Keystone Identity Service |
| 311f7a8416f04dcaa617f744d6012364 | neutron  | network  |    OpenStack Networking   |
| fdfcdafb90854f36bb669779f2c9c464 | neutron  | network  |    OpenStack Networking   |
| 2c75b9ac84e94795a56fb94712fba1f9 |   nova   | compute  |    Nova Compute Service   |
+----------------------------------+----------+----------+---------------------------+
[root@controller0 ~]# keystone help service-list
usage: keystone service-list
List all services in Service Catalog.
[root@controller0 ~]# keystone help service-get
usage: keystone service-get <service>
Display service from Service Catalog.
Arguments:
<service>  Name or ID of service to display.
[root@controller0 ~]# keystone service-get nova
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |       Nova Compute Service       |
|   enabled   |               True               |
|      id     | 2c75b9ac84e94795a56fb94712fba1f9 |
|     name    |               nova               |
|     type    |             compute              |
+-------------+----------------------------------+
[root@controller0 ~]# keystone service-create  --name myservice --type myservice --description "service of mime"
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |         service of mime          |
|   enabled   |               True               |
|      id     | edc2daaa830e4b13b48c57a452bdf73f |
|     name    |            myservice             |
|     type    |            myservice             |
+-------------+----------------------------------+
[root@controller0 ~]# keystone service-delete myservice

二 Endpoint相关命令keystone endpoint-list | endpoint-get | endpoint-create | endpoint-delete

[root@controller0 ~]# keystone endpoint-list
+----------------------------------+-----------+------------------------------------------+------------------------------------------+------------------------------------------+----------------------------------+
|                id                |   region  |                publicurl                 |               internalurl                |                 adminurl                 |            service_id            |
+----------------------------------+-----------+------------------------------------------+------------------------------------------+------------------------------------------+----------------------------------+
| 08feef21842442cf9185e748d14d9214 | regionOne |       http://controller0:5000/v2.0       |       http://controller0:5000/v2.0       |      http://controller0:35357/v2.0       | b8860e4213ef4b828e5c81b1b9e4d0bb |
| 5913a3bb83bf417ab99ca0d4707ceb3b | regionOne | http://controller0:8774/v2/%(tenant_id)s | http://controller0:8774/v2/%(tenant_id)s | http://controller0:8774/v2/%(tenant_id)s | 2c75b9ac84e94795a56fb94712fba1f9 |
| 6be86cd7eaf94f3a90b5664a89663746 | regionOne |         http://controller0:9292          |         http://controller0:9292          |         http://controller0:9292          | 04555caea1674cc0bc17e69fa0f9ff38 |
| f6e7b82b85684ca6bf683643e6895c03 | regionOne |         http://controller0:9696          |         http://controller0:9696          |         http://controller0:9696          | fdfcdafb90854f36bb669779f2c9c464 |
+----------------------------------+-----------+------------------------------------------+------------------------------------------+------------------------------------------+----------------------------------+
[root@controller0 ~]# keystone endpoint-get --service compute
+-------------------+-------------------------------------------------------------+
|      Property     |                            Value                            |
+-------------------+-------------------------------------------------------------+
| compute.publicURL | http://controller0:8774/v2/4e845b494bf74cbf89213bf552db8599 |
+-------------------+-------------------------------------------------------------+

三 Tenant 相关命令

keystone tenant-create | tenant-delete | tenant-get | tenant-list | tenant-update
[root@controller0 ~]# keystone tenant-list
+----------------------------------+---------+---------+
|                id                |   name  | enabled |
+----------------------------------+---------+---------+
| 4e845b494bf74cbf89213bf552db8599 |  admin  |   True  |
| 4d594d19cbe3476d82a71fd597300c84 |   demo  |   True  |
| 367a5bec707a459bb9ed5bdb9d076e44 | service |   True  |
+----------------------------------+---------+---------+
[root@controller0 ~]# keystone tenant-get admin
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |           Admin Tenant           |
|   enabled   |               True               |
|      id     | 4e845b494bf74cbf89213bf552db8599 |
|     name    |              admin               |
+-------------+----------------------------------+
[root@controller0 ~]# keystone help tenant-update
usage: keystone tenant-update [--name <tenant_name>]
[--description <tenant-description>]
[--enabled <true|false>]
<tenant>
Update tenant name, description, enabled status.
Arguments:
--name <tenant_name>  Desired new name of tenant.
--description <tenant-description>
Desired new description of tenant.
--enabled <true|false>
Enable or disable tenant.
<tenant>              Name or ID of tenant to update.

四 User相关命令keystone user-create | user-get | user-password-update | user-role-list | user update | user-delete | user-list | user-role-add | user-role-remove

[root@controller0 ~]# keystone user-list
+----------------------------------+---------+---------+---------------------+
|                id                |   name  | enabled |        email        |
+----------------------------------+---------+---------+---------------------+
| 6efb8d6615b84cacb7cbdf0591a66bb7 |  admin  |   True  |  admin@example.com  |
| 61091081c69d4c9e81ceced70c42186c |   demo  |   True  |   demo@example.com  |
| e9f8d113c0c341a2b7d81099f004c122 |  glance |   True  |  glance@example.com |
| 7da0f9ac20b744968ff8a3e5fa569c40 | neutron |   True  | neutron@example.com |
| 0e5748d7ba7349e0a93f115a2545c9c8 |   nova  |   True  |   nova@example.com  |
+----------------------------------+---------+---------+---------------------+
[root@controller0 ~]# keystone user-get nova
+----------+----------------------------------+
| Property |              Value               |
+----------+----------------------------------+
|  email   |         nova@example.com         |
| enabled  |               True               |
|    id    | 0e5748d7ba7349e0a93f115a2545c9c8 |
|   name   |               nova               |
| username |               nova               |
+----------+----------------------------------+

五 Role相关命令

keystone role-create | role-delete | role-get | role-list
[root@controller0 ~]# keystone role-list
+----------------------------------+----------+
|                id                |   name   |
+----------------------------------+----------+
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
| 56136419bd604aed82fbda5737e3af69 |  admin   |
+----------------------------------+----------+
[root@controller0 ~]# keystone user-role-list
+----------------------------------+-------+----------------------------------+----------------------------------+
|                id                |  name |             user_id              |            tenant_id             |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 56136419bd604aed82fbda5737e3af69 | admin | 6efb8d6615b84cacb7cbdf0591a66bb7 | 4e845b494bf74cbf89213bf552db8599 |
+----------------------------------+-------+----------------------------------+----------------------------------+
[root@controller0 ~]# keystone user-role-list --user nova --tenant service
+----------------------------------+-------+----------------------------------+----------------------------------+
|                id                |  name |             user_id              |            tenant_id             |
+----------------------------------+-------+----------------------------------+----------------------------------+
| 56136419bd604aed82fbda5737e3af69 | admin | 0e5748d7ba7349e0a93f115a2545c9c8 | 367a5bec707a459bb9ed5bdb9d076e44 |
+----------------------------------+-------+----------------------------------+----------------------------------+