十、Openstack对象存储服务（swift）上
配置：我在计算节点添加了两块硬盘（sdb，sdc）用来当存储用，在我这搭建中计算节点也就是存储节点了，原因电脑无法拉动更多虚拟几所以咯。。。
简单介绍：
swift主要有四个组件：swift-proxy-server、swift-account-server、swift-container-server、swift-object-server
swift-proxy-server(代理服务):对外提供对象服务 API
swift-account-server(账户服务):提供账户元数据和统计信息，并维护所含容器列表的服务,管理由对象存储定义的账户
swift-container-server(容器服务):提供容器元数据和统计信息，并维护所含对象列表的服务
swift-object-server(对象服务):提供对象元数据和内容服务，每个对象的内容会以文件的形式存储在文件系统中，元数据会作为文件属性来存储，建议采用支持扩展属性的 XFS 文件系统
控制节点上
swift不需要数据库我们直接创建服务
1.创建swift用户
需要管理员权限
. admin-openrc
openstack user create --domain default --password-prompt swift
[root@controller ~]# . admin-openrc
[root@controller ~]# openstack user create --domain default --password-prompt swift
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | b24b3093654b4ba4be706fe675a03b2d |
| enabled | True |
| id | 90f27d7d1fb644babb1f35f6a7919866 |
| name | swift |
+-----------+----------------------------------+
2.添加 admin 角色到swift 用户和 service 项目上
openstack role add --project service --user swift admin
[root@controller ~]# openstack role add --project service --user swift admin
此操作无返回
3.创建swift服务实体
openstack service create --name swift --description "OpenStack Object Storage" object-store
[root@controller ~]# openstack service create --name swift \
> --description "OpenStack Object Storage" object-store
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | OpenStack Object Storage |
| enabled | True |
| id | 1fbb8b2624694fc780291896d2f210a7 |
| name | swift |
| type | object-store |
+-------------+----------------------------------+
4.创建镜像服务的 API 端点
openstack endpoint create --region RegionOne object-store public http://controller:8080/v1/AUTH_% \ （括号前面是有\ 的）(tenant_id \ )s
openstack endpoint create --region RegionOne object-store internal http://controller:8080/v1/AUTH_% \ (tenant_id \ )s
openstack endpoint create --region RegionOne object-store admin http://controller:8080/v1
[root@controller ~]# openstack endpoint create --region RegionOne \
> object-store public http://controller:8080/v1/AUTH_%(tenant_id)s
+--------------+----------------------------------------------+
| Field | Value |
+--------------+----------------------------------------------+
| enabled | True |
| id | bc95965d7d084ca68e07e7259bb78385 |
| interface | public |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1fbb8b2624694fc780291896d2f210a7 |
| service_name | swift |
| service_type | object-store |
| url | http://controller:8080/v1/AUTH_%(tenant_id)s |
+--------------+----------------------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne \
> object-store internal http://controller:8080/v1/AUTH_%(tenant_id)s
+--------------+----------------------------------------------+
| Field | Value |
+--------------+----------------------------------------------+
| enabled | True |
| id | 83e47740125d42bea679097908bff9fa |
| interface | internal |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1fbb8b2624694fc780291896d2f210a7 |
| service_name | swift |
| service_type | object-store |
| url | http://controller:8080/v1/AUTH_%(tenant_id)s |
+--------------+----------------------------------------------+
[root@controller ~]# openstack endpoint create --region RegionOne \
> object-store admin http://controller:8080/v1
+--------------+----------------------------------+
| Field | Value |
+--------------+----------------------------------+
| enabled | True |
| id | b75d6e318ae5481fbb602551a2e2278f |
| interface | admin |
| region | RegionOne |
| region_id | RegionOne |
| service_id | 1fbb8b2624694fc780291896d2f210a7 |
| service_name | swift |
| service_type | object-store |
| url | http://controller:8080/v1 |
+--------------+----------------------------------+
5.安装软件包
yum install openstack-swift-proxy python-swiftclient python-keystoneclient python-keystonemiddleware memcached
从对象存储的仓库源中获取代理服务的配置文件（需要联网，否则自己浏览器打开自己粘贴创建文件）
curl -o /etc/swift/proxy-server.conf https://git.openstack.org/cgit/openstack/swift/plain/etc/proxy-server.conf-sample
[root@controller ~]# curl -o /etc/swift/proxy-server.conf https://git.openstack.org/cgit/openstack/swift/plain/etc/proxy-server.conf-sample
% Total % Received % Xferd Average Speed Time Time Time Current
Dload Upload Total Spent Left Speed
100 41023 100 41023 0 0 27880 0 0:00:01 0:00:01 --:--:-- 27887
6.修改配置文件
/etc/swift/proxy-server.conf
vi /etc/swift/proxy-server.conf
[DEFAULT]
bind_port = 8080绑定端口
user = swift用户
swift_dir = /etc/swift目录
将原句注释直接复制粘贴（很长这是一句不要回车，不要改顺序，不然会报错8080）
[pipeline:main]
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk ratelimit authtoken keystoneauth container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server
启动自动账户创建
[app:proxy-server]
use = egg:swift#proxy
account_autocreate = True
配置操作员角色
这个配置是注释了的可以直接包括头[filter:keystoneauth]添加在配置最下面（不放心的去自己搜索看看）
[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = admin,user
配置认证服务访问
这个配置也是注释了的可以直接包括头[filter:authtoken]添加在配置最下面（不放心的去自己搜索看看）
[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = swift
password = 123456（创建用户时你为swift设置的密码）
delay_auth_decision = True
配置 memcached 的位置
[filter:cache]
use = egg:swift#memcache
memcache_servers = controller:11211
京公网安备 11010802041100号