OpenStack Newton : Configure Keystone#2
2016/10/22 |
Add Projects or Roles in Keystone.
|
|
[1] | Create and Load environment variables file. The password for "OS_PASSWORD" is the one you set it on bootstrapping keystone. The URL for "OS_AUTH_URL" is the Keystone server's hostname or IP address. |
[root@dlp ~]#
vi ~/keystonerc
export OS_PROJECT_DOMAIN_NAME=default
export OS_USER_DOMAIN_NAME=default export OS_PROJECT_NAME=admin export OS_USERNAME=admin export OS_PASSWORD=adminpassword export OS_AUTH_URL=http://10.0.0.30:35357/v3 export OS_IDENTITY_API_VERSION=3 export OS_IMAGE_API_VERSION=2 export PS1='[\u@\h \W(keystone)]\$ ' chmod 600 ~/keystonerc [root@dlp ~]# source ~/keystonerc [root@dlp ~(keystone)]# echo "source ~/keystonerc " >> ~/.bash_profile
|
[2] | Create Projects. |
# create service project [root@dlp ~(keystone)]# openstack project create --domain default --description "Service Project" service +-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | Service Project | | domain_id | default | | enabled | True | | id | fb1ebfb4fe2a4ef3918d02932f4de062 | | is_domain | False | | name | service | | parent_id | default | +-------------+----------------------------------+ # confirm settings [root@dlp ~(keystone)]# openstack project list +----------------------------------+---------+ | ID | Name | +----------------------------------+---------+ | 150e205a8791426e8028a94699fb8848 | admin | | fb1ebfb4fe2a4ef3918d02932f4de062 | service | +----------------------------------+---------+ |
[3] | Create Roles. |
# create Member role [root@dlp ~(keystone)]# openstack role create Member +-----------+----------------------------------+ | Field | Value | +-----------+----------------------------------+ | domain_id | None | | id | d732b9d324ea42b9b38bb42c84bf65fe | | name | Member | +-----------+----------------------------------+ # confirm settings [root@dlp ~(keystone)]# openstack role list +----------------------------------+--------+ | ID | Name | +----------------------------------+--------+ | 4869537ea1844a50beaf208445e1c6ac | admin | | d732b9d324ea42b9b38bb42c84bf65fe | Member | +----------------------------------+--------+ |