#Openstack Keystone Identity Management | Openstack Tutorials

Показать описание

#openstack Keystone Identity Management | Openstack Tutorials
Keystone is an OpenStack service that provides API client authentication, service discovery, and distributed multi-tenant authorization by implementing OpenStack’s Identity API.
The Keystone or OpenStack Identity service acts as a catalog of all OpenStack services.
It provides the ability for authenticating and managing user accounts and role information for the cloud environment.
It is similar to “Active Directory” of Microsoft Windows Server.
It is the first component to be installed when starting an OpenStack cloud.
Keystone supports multiple forms of authentication, including login name and password, token-based credentials, and REST API log ins.
Service
OpenStack cloud component listed in Keystone catalog.
Examples of the services are Nova, Neutron, Glance, Keystone itself, etc.
Service provides one or more endpoints through which users can access service’s API.
Endpoint
URL from which the service is available.
Service can have three endpoints: internal, public, and administration.
They can have different subsets of API calls.
At this URL you would find that the service is listening to incoming calls on port number 5000 and the API version is 3.
Project
Represents the base unit of ownership in OpenStack.
Networks, VMs, users, roles, and so on belong to a particular project.
For administrative operations in OpenStack, an environment special administrative project “admin” exists.
Domain
Represents a collection of projects, groups, and users that defines administrative boundaries for managing OpenStack Identity entities.
Region
Separates the OpenStack environment with dedicated API endpoints but with common Keystone service.
Token
Issued by Keystone service, passed to API requests and used by OpenStack to verify that the client is authorized to run the requested operation.
The token is issued for a limited time and, if necessary, may be withdrawn prior to the expiration.
In order to get the user token, the user must either provide a name and password, or the name and the key to access the API (API key).
The token also contains a list of roles that defines the roles available to the user.

openstack tutorial,openstack,openstack wallaby,openstack wallaby on ubuntu,openstack on ubuntu 20.04,,openstack keystone identity service,openstack keystone,openstack keystone tutorial,openstack keystone installation,keystone openstack identity service,configure keystone openstack service,openstack victoria keystone identity service,openstack keystone token,openstack keystone install,openstack keystone restart,keystone openstack tutorial,installing keystone in openstack