OpenStack：Keystone常用运维命令(ice-house)
目录
用户(User)
查看用户列表
icehouse版本：
[root@controller ~]# source admin-openrc.sh
[root@controller ~]# keystone user-list
+----------------------------------+------------+---------+-------------+ | id | name | enabled | email | +----------------------------------+------------+---------+-------------+ | 83cbfd254b294529853aa51200bd6fe4 | admin | True | | | 6688034fe384439980e12524f640dbf8 | ceilometer | True | | | e1a4c70392d2430eb2c8916ec1fce71d | cinder | True | | | d3faa6ca18a7467687bd860376b9fd74 | glance | True | | | d7aa628f124e46ea8ff3f8f0513d6f78 | heat | True | | | c56ed3b2d11245b49a1db0cff56e66cd | neutron | True | | | c5a8f55c858e48d2a67e32b9d7bd6ec9 | nova | True | | | 99527437c77d4ffe8bd0cf997dd1a732 | sahara | True | | | 2cfc9a71d2f34c8bb65ada96c356b171 | swift | True | SWIFT_EMAIL | +----------------------------------+------------+---------+-------------+
Mitaka版本：
openstack user list
[root@controller ~]# openstack user list +----------------------------------+-------+ | ID | Name | +----------------------------------+-------+ | 15fa09b4d9f246c1b5cd159d68449930 | admin | | b1a5f56f873f4e31a878d8c470b2df08 | demo +----------------------------------+-------+|
创建用户
Icehouse版本：
[root@controller ~]# keystone user-create --name maxin --pass=000000 --email=maxin5452@163.com
+----------+----------------------------------+ | Property | Value | +----------+----------------------------------+ | email | maxin5452@163.com | | enabled | True | | id | e3797e5aebf4412ea358846873f734e6 | | name | maxin | | username | maxin | +----------+----------------------------------+
Mitaka版本：
openstack user create [-h] [-f {json,shell,table,value,yaml}] [-c COLUMN] [--max-width <integer>] [--print-empty] [--noindent] [--prefix PREFIX] [--domain <domain>] [--project <project>] [--project-domain <project-domain>] [--password <password>] [--password-prompt] [--email <email-address>] [--description <description>] [--enable | --disable] [--or-show] <name>
！！！！！一般使用中只要写出自己需要的参数就好
[root@controller ~]# openstack user create --domain default --password 000000 ma +-----------+----------------------------------+ | Field | Value | +-----------+----------------------------------+ | domain_id | b39f90915f0a4956b6f643d4354abafe | | enabled | True | | id | 7d8423eaf36b4d0283615c2ddc5a312a | | name | ma | +-----------+----------------------------------+
显示用户详细信息
[root@controller ~]# keystone user-get e3797e5aebf4412ea358846873f734e6
+----------+----------------------------------+ | Property | Value | +----------+----------------------------------+ | email | maxin5452@163.com | | enabled | True | | id | e3797e5aebf4412ea358846873f734e6 | | name | maxin | | username | maxin |
Mitaka版本：
openstack user show <user-id> <用户名或者用户id都可以，以下也是一样，为了简单下面只使用user-id>
更新用户的信息
openstack user set [-h] [--name <name>] [--domain <domain>][--project <project>][--project-domain <project-domain>] [--password <password>] [--password-prompt][--email <email-address>][--description <description>] [--enable | --disable] <user>
赋予用户一个角色
openstack role add --project demo（项目名） --user demo（用户名） user（角色名）
查看用户与角色的对应关系---显示的表格是id
openstack role assignment list
删除用户的一个角色
openstack user-role-remove --user-id <user-id> --role-id <role-id>
[--tenant-id <tenant-id>]
更新用户信息
openstack role remove [-h] [--domain <domain> | --project <project>] [--user <user> | --group <group>] [--group-domain <group-domain>] [--project-domain <project-domain>] [--user-domain <user-domain>] [--inherited] [--role-domain <role-domain>] <role>
删除用户
openstack user delete <user-id>
