1、下载安装openstack软件仓库

yum install centos-release-openstack-queens -y
更新
yum upgrade
reboot
安装客户端
yum install python-openstackclient -y
安装selinux
yum install openstack-selinux -y

2、创建keystone数据库并授权

mysql -h 127.0.0.1 -u root -p123465
CREATE DATABASE keystone;
授权操作
GRANT ALL PRIVILEGES ON keystone. TO ‘keystone’@’localhost’ IDENTIFIED BY
‘123456’;
GRANT ALL PRIVILEGES ON keystone. TO ‘keystone’@’%’ IDENTIFIED BY ‘123456’;
image.png

3、安装、配置组件

yum install openstack-keystone httpd mod_wsgi -y
生成一个随机值在初始的配置中作为管理员的令牌
openssl rand -hex 10
得到admin_token = 5deabbf1ac1580d09a28
image.png
vim /etc/keystone/keystone.conf
[DEFAULT]
admin_token=5deabbf1ac1580d09a28
[database]
connection = connection=mysql+pymysql://keystone:123456@192.168.253.130/keystone
[token]
provider = fernet
which keystone-manage
/usr/bin/keystone-manage

4、初始化数据库

su -s /bin/sh -c “keystone-manage db_sync” keystone
或者
keystone-manage db_sync
查看keystone数据库表
mysql -h 127.0.0.1 -u root -p123456
show databases;
use keystone;
show tables;

5、初始化Fernet密钥库以生成令牌

1、keystone-manage fernet_setup —keystone-user keystone —keystone-group keystone
2、keystone-manage credential_setup —keystone-user keystone —keystone-group keystone

6、对Keystone应用Bootstrap框架执行初始化

引导身份认证服务
keystone-manage bootstrap —bootstrap-password 123456 —bootstrap-admin-url http://192.168.253.130:35357/v3/ —bootstrap-internal-url http://192.168.253.130:5000/v3/ —bootstrap-public-url http://192.168.253.130:5000/v3/ —bootstrap-region-id RegionOne

7、配置Apache HTTP服务器

配置ServerName选项
vim /etc/httpd/conf/httpd.conf
image.png
创建一个软连接
ln -s /usr/share/keystone/wsgi-keystone.conf /etc/httpd/conf.d/
设置开机启动
systemctl enable httpd
systemctl start httpd
浏览器输入
192.168.253.130:80
image.png