OpenStack Caracal : ユーザーを新規追加する2024/08/06

	Openstack が利用可能な任意のユーザーを Keystone に新規追加します。
[1]	ユーザー名やプロジェクト名は任意の名称で OK です。

# 任意のプロジェクト追加

[root@dlp ~(keystone)]#

openstack project create --domain default --description "Hiroshima Project" hiroshima

+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | Hiroshima Project                |
| domain_id   | default                          |
| enabled     | True                             |
| id          | 03a31c43ede44dcbaacb05c870920e81 |
| is_domain   | False                            |
| name        | hiroshima                        |
| options     | {}                               |
| parent_id   | default                          |
| tags        | []                               |
+-------------+----------------------------------+

# 任意のユーザー追加

[root@dlp ~(keystone)]#

openstack user create --domain default --project hiroshima --password userpassword serverworld

+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | 03a31c43ede44dcbaacb05c870920e81 |
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 8a9b46168b42480f889ad4fad3ca6ee4 |
| name                | serverworld                      |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

[root@dlp ~(keystone)]#

openstack role list

+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 2096b9d868f24aa4b879ead11fdfbd47 | reader  |
| 48a32d4ca9ef44dfb4c191d96620013f | admin   |
| 8fc9011839cb46e591dbde56d0179588 | manager |
| c544d69550f44be19c2a7262940a90b0 | service |
| f37cb3e2f3a8418d80bfbf658caeeffc | member  |
+----------------------------------+---------+

# ユーザーを [member] ロールに加える

[root@dlp ~(keystone)]#

openstack role add --project hiroshima --user serverworld member

[2]	任意の OS ユーザーに、Openstack システムが利用できるように、追加した Openstack ユーザー用の環境変数を設定します。

[cent@dlp ~]$

vi ~/keystonerc

export OS_PROJECT_DOMAIN_NAME=Default
export OS_USER_DOMAIN_NAME=Default
export OS_PROJECT_NAME=hiroshima
export OS_USERNAME=serverworld
export OS_PASSWORD=userpassword
export OS_AUTH_URL=https://dlp.srv.world:5000
export OS_IDENTITY_API_VERSION=3
export OS_IMAGE_API_VERSION=2
export PS1='[\u@\h \W(keystone)]\$ '

[cent@dlp ~]$

chmod 600 ~/keystonerc

[cent@dlp ~]$

source ~/keystonerc

[cent@dlp ~(keystone)]$

echo "source ~/keystonerc " >> ~/.bash_profile

# openstack コマンドが利用できるか確認

[cent@dlp ~(keystone)]$

openstack project list

+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| 03a31c43ede44dcbaacb05c870920e81 | hiroshima |
+----------------------------------+-----------+