Skip to content

keystone

Jump to bottom Edit New page
irixjp edited this page Nov 17, 2012 · 4 revisions

keystone の解説

http://www.slideshare.net/h-saito/openstack-study9-josug

keystone コマンド

ユーザの確認

$ keystone --token admintoken --endpoint http://localhost:35357/v2.0 user-list

+----------------------------------+---------+---------+---------------------+
|                id                |   name  | enabled |        email        |
+----------------------------------+---------+---------+---------------------+
| 0de5da2593744837babed771d93e2e5a | quantum |   True  | quantum@example.com |
| 217649fb80de4969a01924c8e6f1ca6d |  glance |   True  |  glance@example.com |
| 3157e2e532994f23a6cf6d2e2cdff865 |   nova  |   True  |   nova@example.com  |
| 49a0270b747d40a1a3429d471bd45a9e |  cinder |   True  |  cinder@example.com |
| 9217ab7e31bd40c394c8661aedfa0580 |  admin  |   True  |  admin@example.com  |
| ce0bd2aaf4ed4486aff3abdaa8aa4841 |   demo  |   True  |   demo@example.com  |
+----------------------------------+---------+---------+---------------------+

テナントの確認

$ keystone --token admintoken --endpoint http://localhost:35357/v2.0 tenant-list

+----------------------------------+--------------------+---------+
|                id                |        name        | enabled |
+----------------------------------+--------------------+---------+
| 0dd44a10b4fe48b0865b4b150c4e3a7a |       admin        |   True  |
| 57d9c03e12c5482a945c268fb96568cc | invisible_to_admin |   True  |
| a9bf22f18c104c7e91b03d20ce0070cf |      service       |   True  |
| bbc84af5ec8a4e94a32d9cdad827ee87 |        demo        |   True  |
+----------------------------------+--------------------+---------+

テナントの確認

$ keystone --token admintoken --endpoint http://localhost:35357/v2.0 role-list

+----------------------------------+----------------------+
|                id                |         name         |
+----------------------------------+----------------------+
| 08475386465e4c659eef55956b522ded |    ResellerAdmin     |
| 1c7c753ce0a24cd19504bd17b3498640 |     anotherrole      |
| 45fc1e8c26864d20a63ace34ce175115 | KeystoneServiceAdmin |
| 671173378de246f493c36d1c350d7de9 |        Member        |
| acb42ed4d3cd466687b1711693657581 |    KeystoneAdmin     |
| d4eb0a3a1f0b4eaaa8d4ff54fe0f6634 |        admin         |
+----------------------------------+----------------------+

ユーザ、テナント、ロールの確認

$ keystone --token admintoken --endpoint http://localhost:35357/v2.0 user-role-list --user-id ce0bd2aaf4ed4486aff3abdaa8aa4841 --tenant-id bbc84af5ec8a4e94a32d9cdad827ee87
+----------------------------------+-------------+----------------------------------+----------------------------------+
|                id                |     name    |             user_id              |            tenant_id             |
+----------------------------------+-------------+----------------------------------+----------------------------------+
| 1c7c753ce0a24cd19504bd17b3498640 | anotherrole | ce0bd2aaf4ed4486aff3abdaa8aa4841 | bbc84af5ec8a4e94a32d9cdad827ee87 |
| 671173378de246f493c36d1c350d7de9 |    Member   | ce0bd2aaf4ed4486aff3abdaa8aa4841 | bbc84af5ec8a4e94a32d9cdad827ee87 |
+----------------------------------+-------------+----------------------------------+----------------------------------+

サービスリスト

$ keystone --token admintoken-2012 --endpoint http://localhost:35357/v2.0 service-list

+----------------------------------+----------+----------+---------------------------+
|                id                |   name   |   type   |        description        |
+----------------------------------+----------+----------+---------------------------+
| 10e2ad81aa7c4affb5c47b50f3fc397c | quantum  | network  |      Quantum Service      |
| 540ae1abd6ea4eb1bfbba5ad2fedd5ed |   nova   | compute  |    Nova Compute Service   |
| 56fbb180ba82435995699f55e7660ea3 | keystone | identity | Keystone Identity Service |
| 7459005eb359421eae404e0291ea7ffe |   ec2    |   ec2    |  EC2 Compatibility Layer  |
| 8225371199c840059f7c7f6ed6e3c643 |  glance  |  image   |    Glance Image Service   |
| de8ff48c37664cfea7a23c97e07b2413 |  cinder  |  volume  |       Cinder Service      |
+----------------------------------+----------+----------+---------------------------+

REST経由の認証確認

$ curl -d '{"auth": {"tenantName": "demo", "passwordCredentials":{"username": "demo", "password": "openstack"}}}' -H "Content-type: application/json" http://localhost:5000/v2.0/tokens |python -mjson.tool

  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100  2490  100  2383  100   107  30601   1374 --:--:-- --:--:-- --:--:-- 30948
{
    "access": {
        "metadata": {
            "is_admin": 0,
            "roles": [
                "671173378de246f493c36d1c350d7de9",
                "1c7c753ce0a24cd19504bd17b3498640"
            ]   
        },  
        "serviceCatalog": [
            {
                "endpoints": [
                    {
                        "adminURL": "http://157.7.133.23:8774/v2/bbc84af5ec8a4e94a32d9cdad827ee87",
                        "id": "bff4ac400acd481cbe4d5f905b555694",
                        "internalURL": "http://157.7.133.23:8774/v2/bbc84af5ec8a4e94a32d9cdad827ee87",
                        "publicURL": "http://157.7.133.23:8774/v2/bbc84af5ec8a4e94a32d9cdad827ee87", 
                        "region": "RegionOne"
                    }   
                ],  
                "endpoints_links": [],
                "name": "nova",
                "type": "compute"
            },  
            {
                "endpoints": [
                    {
                        "adminURL": "http://157.7.133.23:9696/",
                        "id": "d0b289340ba946ab9cc471930f44b8ce",
                        "internalURL": "http://157.7.133.23:9696/",
                        "publicURL": "http://157.7.133.23:9696/",
                        "region": "RegionOne"
                    }   
                ],  
                "endpoints_links": [],
                "name": "quantum",
                "type": "network"
            },  
            {
                "endpoints": [
                    {
                        "adminURL": "http://157.7.133.23:9292",
                        "id": "0b83949752d948a4acd647eceb0845c3",
                        "internalURL": "http://157.7.133.23:9292",
                        "publicURL": "http://157.7.133.23:9292",
                        "region": "RegionOne"
                    }   
                ],  
                "endpoints_links": [],
                "name": "glance",
                "type": "image"
            },  
            {
                "endpoints": [
                    {
                        "adminURL": "http://157.7.133.23:8773/services/Admin", 
                        "id": "de252f701121413285f64bfa75d26940", 
                        "internalURL": "http://157.7.133.23:8773/services/Cloud", 
                        "publicURL": "http://157.7.133.23:8773/services/Cloud", 
                        "region": "RegionOne"
                    }
                ], 
                "endpoints_links": [], 
                "name": "ec2", 
                "type": "ec2"
            }, 
            {
                "endpoints": [
                    {
                        "adminURL": "http://157.7.133.23:35357/v2.0", 
                        "id": "c5cdbe05fa184c70bf20b5a30bafbbd4", 
                        "internalURL": "http://157.7.133.23:5000/v2.0", 
                        "publicURL": "http://157.7.133.23:5000/v2.0", 
                        "region": "RegionOne"
                    }
                ], 
                "endpoints_links": [], 
                "name": "keystone", 
                "type": "identity"
            }
        ], 
        "token": {
            "expires": "2012-11-08T12:50:37Z", 
            "id": "c7e67643827b4fab93d5173972dd2c6e", 
            "tenant": {
                "description": null, 
                "enabled": true, 
                "id": "bbc84af5ec8a4e94a32d9cdad827ee87", 
                "name": "demo"
            }
        }, 
        "user": {
            "id": "ce0bd2aaf4ed4486aff3abdaa8aa4841", 
            "name": "demo", 
            "roles": [
                {
                    "name": "Member"
                }, 
                {
                    "name": "anotherrole"
                }
            ], 
            "roles_links": [], 
            "username": "demo"
        }
    }
}
Add a custom footer
Add a custom sidebar

Clone this wiki locally