97 lines
3.7 KiB
Bash
Executable File
97 lines
3.7 KiB
Bash
Executable File
#!/bin/bash
|
|
# Tenants
|
|
export SERVICE_TOKEN=$SERVICE_TOKEN
|
|
export SERVICE_ENDPOINT=$SERVICE_ENDPOINT
|
|
|
|
function get_id () {
|
|
echo `$@ | grep id | awk '{print $4}'`
|
|
}
|
|
|
|
ADMIN_TENANT=`get_id keystone tenant-create --name=admin`
|
|
DEMO_TENANT=`get_id keystone tenant-create --name=demo`
|
|
INVIS_TENANT=`get_id keystone tenant-create --name=invisible_to_admin`
|
|
|
|
|
|
# Users
|
|
ADMIN_USER=`get_id keystone user-create \
|
|
--name=admin \
|
|
--pass="$ADMIN_PASSWORD" \
|
|
--email=admin@example.com`
|
|
DEMO_USER=`get_id keystone user-create \
|
|
--name=demo \
|
|
--pass="$ADMIN_PASSWORD" \
|
|
--email=admin@example.com`
|
|
|
|
# Roles
|
|
ADMIN_ROLE=`get_id keystone role-create --name=admin`
|
|
MEMBER_ROLE=`get_id keystone role-create --name=Member`
|
|
KEYSTONEADMIN_ROLE=`get_id keystone role-create --name=KeystoneAdmin`
|
|
KEYSTONESERVICE_ROLE=`get_id keystone role-create --name=KeystoneServiceAdmin`
|
|
SYSADMIN_ROLE=`get_id keystone role-create --name=sysadmin`
|
|
NETADMIN_ROLE=`get_id keystone role-create --name=netadmin`
|
|
|
|
|
|
# Add Roles to Users in Tenants
|
|
keystone add-user-role $ADMIN_USER $ADMIN_ROLE $ADMIN_TENANT
|
|
keystone add-user-role $DEMO_USER $MEMBER_ROLE $DEMO_TENANT
|
|
keystone add-user-role $DEMO_USER $SYSADMIN_ROLE $DEMO_TENANT
|
|
keystone add-user-role $DEMO_USER $NETADMIN_ROLE $DEMO_TENANT
|
|
keystone add-user-role $DEMO_USER $MEMBER_ROLE $INVIS_TENANT
|
|
keystone add-user-role $ADMIN_USER $ADMIN_ROLE $DEMO_TENANT
|
|
|
|
# TODO(termie): these two might be dubious
|
|
keystone add-user-role $ADMIN_USER $KEYSTONEADMIN_ROLE $ADMIN_TENANT
|
|
keystone add-user-role $ADMIN_USER $KEYSTONESERVICE_ROLE $ADMIN_TENANT
|
|
|
|
# Services
|
|
keystone service-create \
|
|
--name=nova \
|
|
--type=compute \
|
|
--description="Nova Compute Service"
|
|
|
|
keystone service-create \
|
|
--name=ec2 \
|
|
--type=ec2 \
|
|
--description="EC2 Compatibility Layer"
|
|
|
|
keystone service-create \
|
|
--name=glance \
|
|
--type=image \
|
|
--description="Glance Image Service"
|
|
|
|
keystone service-create \
|
|
--name=keystone \
|
|
--type=identity \
|
|
--description="Keystone Identity Service"
|
|
if [[ "$ENABLED_SERVICES" =~ "swift" ]]; then
|
|
keystone service-create \
|
|
--name=swift \
|
|
--type="object-store" \
|
|
--description="Swift Service"
|
|
fi
|
|
if [[ "$ENABLED_SERVICES" =~ "quantum" ]]; then
|
|
keystone service-create \
|
|
--name=quantum \
|
|
--type=network \
|
|
--description="Quantum Service"
|
|
fi
|
|
|
|
# create ec2 creds and parse the secret and access key returned
|
|
RESULT=`keystone ec2-create-credentials --tenant_id=$ADMIN_TENANT --user_id=$ADMIN_USER`
|
|
echo `$@ | grep id | awk '{print $4}'`
|
|
ADMIN_ACCESS=`echo "$RESULT" | grep access | awk '{print $4}'`
|
|
ADMIN_SECRET=`echo "$RESULT" | grep secret | awk '{print $4}'`
|
|
|
|
|
|
RESULT=`keystone ec2-create-credentials --tenant_id=$DEMO_TENANT --user_id=$DEMO_USER`
|
|
DEMO_ACCESS=`echo "$RESULT" | grep access | awk '{print $4}'`
|
|
DEMO_SECRET=`echo "$RESULT" | grep secret | awk '{print $4}'`
|
|
|
|
# write the secret and access to ec2rc
|
|
cat > $DEVSTACK_DIR/ec2rc <<EOF
|
|
ADMIN_ACCESS=$ADMIN_ACCESS
|
|
ADMIN_SECRET=$ADMIN_SECRET
|
|
DEMO_ACCESS=$DEMO_ACCESS
|
|
DEMO_SECRET=$DEMO_SECRET
|
|
EOF
|