API
透過GUI、CLI下的指令，都會轉換成API來執行，所以任何指令也都能透過API來完成
Debug CLI
CLI加上–debug，便能expose API的行為
Set environmental variables
#bash的completion
$ source /opt/stack/python-novaclient/tools/nova.bash_completion
#從某個demo in demo執行指令
$ source openrc demo demo
Keystone – creating tenants, users and roles
#建立General tenant
$ keystone tenant-create --name General
#建立XXX user
$ keystone user-create \
--name=XXX \
--pass=openstack \
--tenant-id [tenant_id] \
--email=XXX@mail.com
#查看user list, role list
$ keystone user-list
$ keystone role-list
#增加一個role
$ keystone user-role-add \
--tenant-id [tenant_id] \
--user-id [user_id] \
--role-id [role_id]
Neutron – tenant network
inside tenant要建立一個private network、subnet、virtual router再與public(external) network連接
#建立一個internal network
$ neutron net-create \
--tenant-id [tenant_id] \
[NETWORK_NAME]
#在network中建立一個subnet
$ neutron subnet-create \
--tenant-id [tenant_id] \
[NETWORK_NAME] \
[SUBNET_RANGE CIDR ex:172.24.220/24]
#建立一個virtual router
$ neutron router-create \
--tenant-id [tenant_id] \
[ROUTER_NAME]
#把router加入到internal subnet
$ neutron router-interface-add \
[ROUTER_ID] \
[SUBNET_ID]
#秀出external network list
$ neutron net-external-list
#[已經有external network]指定外部的external network作為internal router的gateway
$ neutron router-gateway-set \
[ROUTER_ID] \
[EXT_NETWORK_ID]
#[尚未有external network]若外部沒有external network，則必須建立一個，預設是由admin tenant來建立
$ neutron net-create \
[EXT_NETWORK_NAME] \
--router:external=True
#[尚未有external network]在external network中建立一個subnet
$ neutron subnet-create \
--gateway [GATEWAY_IP ex:192.168.2.1] \
--allocation-pool start=[IP_START ex:192.168.2.2] ,end=[IP_END ex:192.168.2.254] \
[NETWORK_NAME ex:new_public] \
[SUBNET_RANGE CIDR ex:192.168.2.0/24] \
--enable_dhcp=False
#秀出router list
$ neutron router-list
#切換router gateway，從已有的external network切換到新建立的external network
$ neutron router-gateway-clear \
[ROUTER_ID]
$ neutron router-gateway-set \
[ROUTER_ID] \
[NEW_EXT_NETWORK_ID]
#秀出特定router的info
$ neutron router-show
Keystone、Nova、Cinder Quotas management
每個tenant建立時就會帶入預設的quota，每個tenant中的user也會配置tenant的預設quota，但是每個user的quota都可以被調整，當增加quotas超過tenant的quota時，tenant quota也會被調升。
#秀出tenant id
$ keystone tenant-list
#秀出目前tenant內的nova(Compute) quotas information
$ nova quota-show \
--tenant [TENANT_ID]
#秀出目前tenant預設quotas (不加TENANT_ID)
$ nova quota-show
#修改某個tenant的quota限制
$ nova quota-update \
--[QUOTA_KEY ex:cores] [QUOTA_VALUE ex:20] \
[TENANT_ID]
#查詢某個tenant內的user quotas information (預設user quota會等同預設的tenant quota，不受修改的tenant quota影響)
$ nova quota-show \
--user [USER_ID] \
--tenant [TENANT_ID]
#修改某個tenant的user quota限制
$ nova quota-update \
--user [USER_ID] \
--[QUOTA_KEY ex:instance] [QUOTA_VALUE ex:1] \
[TENANT_ID]
#秀出目前tenant內的cinder(Storage) quotas information
$ cinder quota-show \
--tenant [TENANT_ID]
#秀出目前tenant內的neutron(Networking) quotas information
$ neutron quota-show \
--tenant [TENANT_ID]
文章參考資料
- OpenStack IN ACTION (ISBN:9781617292163)
小蝦的Tech學習日誌 