openstack/openstack-manuals
Code Issues Proposed changes

Merge "Use openstack rather than keystone"

Browse Source
This commit is contained in:
Jenkins 2015-07-13 12:22:44 +00:00 committed by Gerrit Code Review
commit 7d6fad01e7
4 changed files with 70 additions and 80 deletions

2
doc/user-guide-admin/source/cli_cinder_quotas.rst

@ -83,7 +83,7 @@ service quotas.
#. To update Block Storage service quotas, place #. To update Block Storage service quotas, place
the tenant ID in a variable:: the tenant ID in a variable::
$ tenant=$(keystone tenant-list | awk '/tenantName/ {print $2}') $ tenant=$(openstack project show -f value -c id tenantName)
#. Update a particular quota value:: #. Update a particular quota value::

104
doc/user-guide-admin/source/cli_keystone_manage_services.rst

@ -39,21 +39,24 @@ Create a service
.. code:: .. code::
$ keystone service-list $ openstack service list
+----------------------------------+----------+----------+---------------------------+ +----------------------------------+----------+------------+
| id | name | type | description | | ID | Name | Type |
+----------------------------------+----------+----------+---------------------------+ +----------------------------------+----------+------------+
| 9816f1faaa7c4842b90fb4821cd09223 | cinder | volume | Cinder Volume Service | | 9816f1faaa7c4842b90fb4821cd09223 | cinder | volume |
| da8cf9f8546b4a428c43d5e032fe4afc | ec2 | ec2 | EC2 Compatibility Layer | | 1250f64f31e34dcd9a93d35a075ddbe1 | cinderv2 | volumev2 |
| 5f105eeb55924b7290c8675ad7e294ae | glance | image | Glance Image Service | | da8cf9f8546b4a428c43d5e032fe4afc | ec2 | ec2 |
| dcaa566e912e4c0e900dc86804e3dde0 | keystone | identity | Keystone Identity Service | | 5f105eeb55924b7290c8675ad7e294ae | glance | image |
| 4a715cfbc3664e9ebf388534ff2be76a | nova | compute | Nova Compute Service | | dcaa566e912e4c0e900dc86804e3dde0 | keystone | identity |
| 6feb2e0b98874d88bee221974770e372 | s3 | s3 | S3 | | 4a715cfbc3664e9ebf388534ff2be76a | nova | compute |
+----------------------------------+----------+----------+---------------------------+ | 1aed4a6cf7274297ba4026cf5d5e96c5 | novav21 | computev21 |
| bed063c790634c979778551f66c8ede9 | neutron | network |
| 6feb2e0b98874d88bee221974770e372 | s3 | s3 |
+----------------------------------+----------+------------+
#. To create a service, run this command:: #. To create a service, run this command::
$ keystone service-create --name SERVICE_NAME --type SERVICE_TYPE --description SERVICE-DESCRIPTION $ openstack service create --name SERVICE_NAME --description SERVICE_DESCRIPTION SERVICE_TYPE
The arguments are: The arguments are:
- ``service_name``: the unique name of the new service. - ``service_name``: the unique name of the new service.
@ -67,34 +70,34 @@ Create a service
.. code:: .. code::
$ keystone service-create --name swift --type object-store --description "object store service" $ openstack service create --name swift --description "object store service" object-store
+-------------+----------------------------------+ +-------------+----------------------------------+
| Property | Value | | Field | Value |
+-------------+----------------------------------+ +-------------+----------------------------------+
| description | object store service | | description | object store service |
| enabled | True | | enabled | True |
| id | 84c23f4b942c44c38b9c42c5e517cd9a | | id | 84c23f4b942c44c38b9c42c5e517cd9a |
| name | swift | | name | swift |
| type | object-store | | type | object-store |
+-------------+----------------------------------+ +-------------+----------------------------------+
#. To get details for a service, run this command:: #. To get details for a service, run this command::
$ keystone service-get SERVICE_ID $ openstack service show SERVICE_TYPE|SERVICE_NAME|SERVICE_ID
For example: For example:
.. code:: .. code::
$ keystone service-get 84c23f4b942c44c38b9c42c5e517cd9a $ openstack service show object-store
+-------------+----------------------------------+ +-------------+----------------------------------+
| Property | Value | | Field | Value |
+-------------+----------------------------------+ +-------------+----------------------------------+
| description | object store service | | description | object store service |
| enabled | True | | enabled | True |
| id | 84c23f4b942c44c38b9c42c5e517cd9a | | id | 84c23f4b942c44c38b9c42c5e517cd9a |
| name | swift | | name | swift |
| type | object-store | | type | object-store |
+-------------+----------------------------------+ +-------------+----------------------------------+
Create service users Create service users
@ -104,56 +107,43 @@ Create service users
Typically, this project is named ``service``, Typically, this project is named ``service``,
but choose any name you like:: but choose any name you like::
$ keystone tenant-create --name service $ openstack project create service
The output shows the ID for the project.
Make a note of this ID. You need it to create
service users and assign roles.
.. code:: .. code::
+-------------+----------------------------------+ +-------------+----------------------------------+
| Property | Value | | Field | Value |
+-------------+----------------------------------+ +-------------+----------------------------------+
| description | | | description | None |
| enabled | True | | enabled | True |
| id | 3e9f3f5399624b2db548d7f871bd5322 | | id | 3e9f3f5399624b2db548d7f871bd5322 |
| name | service | | name | service |
+-------------+----------------------------------+ +-------------+----------------------------------+
#. Create service users for the relevant services for your #. Create service users for the relevant services for your
deployment. deployment.
#. To assign the admin role to the service user-project pairs, #. Assign the admin role to the user-project pair::
run this command to get the ID of the admin role:
$ openstack role add --project service --user SERVICE_USER_NAME admin
.. code:: .. code::
$ keystone role-list +-------+----------------------------------+
+----------------------------------+---------------+ | Field | Value |
| id | name | +-------+----------------------------------+
+----------------------------------+---------------+ | id | 233109e756c1465292f31e7662b429b1 |
| 71ccc37d41c8491c975ae72676db687f | Member | | name | admin |
| 149f50a1fe684bfa88dae76a48d26ef7 | ResellerAdmin | +-------+----------------------------------+
| 9fe2ff9ee4384b1894a90878d3e92bab | _member_ |
| 6ecf391421604da985db2f141e46a7c8 | admin |
| deb4fffd123c4d02a907c2c74559dccf | anotherrole |
| bef1f95537914b1295da6aa038ef4de6 | new-role |
+----------------------------------+---------------+
#. Assign the admin role to the user-project pair::
$ keystone user-role-add --user SERVICE_USER_ID --role ADMIN_ROLE_ID --tenant SERVICE_PROJECT_ID
Delete a service Delete a service
~~~~~~~~~~~~~~~~ ~~~~~~~~~~~~~~~~
To delete a specified service, specify its ID:: To delete a specified service, specify its ID::
$ keystone service-delete SERVICE_ID $ openstack service delete SERVICE_TYPE|SERVICE_NAME|SERVICE_ID
For example: For example:
.. code:: .. code::
$ keystone service-delete 84c23f4b942c44c38b9c42c5e517cd9a $ openstack service delete object-store

12
doc/user-guide-admin/source/cli_set_compute_quotas.rst

@ -83,7 +83,7 @@ To view quota values for an existing tenant (project)
#. Place the tenant ID in a usable variable, as follows:: #. Place the tenant ID in a usable variable, as follows::
$ tenant=$(keystone tenant-list | awk '/TENANT_NAME/ {print $2}') $ tenant=$(openstack project show -f value -c id TENANT_NAME)
#. List the currently set quota values for a tenant, as follows:: #. List the currently set quota values for a tenant, as follows::
@ -113,7 +113,7 @@ To update quota values for an existing tenant (project)
------------------------------------------------------- -------------------------------------------------------
#. Obtain the tenant ID, as follows:: #. Obtain the tenant ID, as follows::
$ tenant=$(keystone tenant-list | awk '/TENANT_NAME/ {print $2}') $ tenant=$(openstack project show -f value -c id TENANT_NAME)
#. Update a particular quota value, as follows:: #. Update a particular quota value, as follows::
@ -150,11 +150,11 @@ To view quota values for a tenant user
-------------------------------------- --------------------------------------
#. Place the user ID in a usable variable, as follows:: #. Place the user ID in a usable variable, as follows::
$ tenantUser=$(keystone user-list | awk '/USER_NAME/ {print $2}') $ tenantUser=$(openstack user show -f value -c id USER_NAME)
#. Place the user's tenant ID in a usable variable, as follows:: #. Place the user's tenant ID in a usable variable, as follows::
$ tenant=$(keystone tenant-list | awk '/TENANT_NAME/ {print $2}') $ tenant=$(openstack project show -f value -c id TENANT_NAME)
#. List the currently set quota values for a tenant user, as follows:: #. List the currently set quota values for a tenant user, as follows::
@ -184,11 +184,11 @@ To update quota values for a tenant user
---------------------------------------- ----------------------------------------
#. Place the user ID in a usable variable, as follows:: #. Place the user ID in a usable variable, as follows::
$ tenantUser=$(keystone user-list | awk '/USER_NAME/ {print $2}') $ tenantUser=$(openstack user show -f value -c id USER_NAME)
#. Place the user's tenant ID in a usable variable, as follows:: #. Place the user's tenant ID in a usable variable, as follows::
$ tenant=$(keystone tenant-list | awk '/USER_NAME/ {print $2}') $ tenant=$(openstack project show -f value -c id TENANT_NAME)
#. Update a particular quota value, as follows:: #. Update a particular quota value, as follows::

32
doc/user-guide-admin/source/cli_set_quotas.rst

@ -20,25 +20,25 @@ node.
.. note:: .. note::
To view all tenants (projects), run:: To view all tenants (projects), run::
$ keystone tenant-list $ openstack project list
+----------------------------------+----------+---------+ +----------------------------------+----------+
| id | name | enabled | | ID | Name |
+----------------------------------+----------+---------+ +----------------------------------+----------+
| e66d97ac1b704897853412fc8450f7b9 | admin | True | | e66d97ac1b704897853412fc8450f7b9 | admin |
| bf4a37b885fe46bd86e999e50adad1d3 | services | True | | bf4a37b885fe46bd86e999e50adad1d3 | services |
| 21bd1c7c95234fd28f589b60903606fa | tenant01 | True | | 21bd1c7c95234fd28f589b60903606fa | tenant01 |
| f599c5cd1cba4125ae3d7caed08e288c | tenant02 | True | | f599c5cd1cba4125ae3d7caed08e288c | tenant02 |
+----------------------------------+----------+---------+ +----------------------------------+----------+
To display all current users for a tenant, run:: To display all current users for a tenant, run::
$ keystone user-list --tenant-id tenantID $ openstack user list --project PROJECT_NAME
+----------------------------------+--------+---------+-------+ +----------------------------------+--------+
| id | name | enabled | email | | ID | Name |
+----------------------------------+--------+---------+-------+ +----------------------------------+--------+
| ea30aa434ab24a139b0e85125ec8a217 | demo00 | True | | | ea30aa434ab24a139b0e85125ec8a217 | demo00 |
| 4f8113c1d838467cad0c2f337b3dfded | demo01 | True | | | 4f8113c1d838467cad0c2f337b3dfded | demo01 |
+----------------------------------+--------+---------+-------+ +----------------------------------+--------+
.. toctree:: .. toctree::