十、Openstack物件儲存服務（swift）上

配置：我在計算節點添加了兩塊硬碟（sdb，sdc）用來當儲存用，在我這搭建中計算節點也就是儲存節點了，原因電腦無法拉動更多虛擬幾所以咯。。。

簡單介紹：

swift主要有四個元件：swift-proxy-server、swift-account-server、swift-container-server、swift-object-server

swift-proxy-server(代理服務):對外提供物件服務 API

swift-account-server(賬戶服務):提供賬戶元資料和統計資訊，並維護所含容器列表的服務,管理由物件儲存定義的賬戶

swift-container-server(容器服務):提供容器元資料和統計資訊，並維護所含物件列表的服務

swift-object-server(物件服務):提供物件元資料和內容服務，每個物件的內容會以檔案的形式儲存在檔案系統中，元資料會作為檔案屬性來儲存，建議採用支援擴充套件屬性的 XFS 檔案系統

控制節點上

swift不需要資料庫我們直接建立服務

1.建立swift使用者

需要管理員許可權

. admin-openrc

openstack user create --domain default --password-prompt swift

[[email protected]
 
 ~]# . admin-openrc 
[[email protected] ~]# openstack user create --domain default --password-prompt swift
User Password:
Repeat User Password:
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | b24b3093654b4ba4be706fe675a03b2d |
| enabled   | True                             |
| id        | 90f27d7d1fb644babb1f35f6a7919866 |
| name      | swift                            |
+-----------+----------------------------------+
 

openstack role add --project service --user swift admin

[[email protected] ~]# openstack role add --project service --user swift admin
此操作無返回

openstack service create --name swift --description "OpenStack Object Storage" object-store

[[email protected] ~]# openstack service create --name swift \
>   --description "OpenStack Object Storage" object-store
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | OpenStack Object Storage         |
| enabled     | True                             |
| id          | 1fbb8b2624694fc780291896d2f210a7 |
| name        | swift                            |
| type        | object-store                     |
+-------------+----------------------------------+

openstack endpoint create --region RegionOne object-store public http://controller:8080/v1/AUTH_% \  （括號前面是有\ 的）(tenant_id \ )s

openstack endpoint create --region RegionOne object-store internal http://controller:8080/v1/AUTH_% \ (tenant_id \ )s

openstack endpoint create --region RegionOne object-store admin http://controller:8080/v1

[[email protected] ~]# openstack endpoint create --region RegionOne \
>   object-store public http://controller:8080/v1/AUTH_%(tenant_id)s
+--------------+----------------------------------------------+
| Field        | Value                                        |
+--------------+----------------------------------------------+
| enabled      | True                                         |
| id           | bc95965d7d084ca68e07e7259bb78385             |
| interface    | public                                       |
| region       | RegionOne                                    |
| region_id    | RegionOne                                    |
| service_id   | 1fbb8b2624694fc780291896d2f210a7             |
| service_name | swift                                        |
| service_type | object-store                                 |
| url          | http://controller:8080/v1/AUTH_%(tenant_id)s |
+--------------+----------------------------------------------+
[[email protected] ~]# openstack endpoint create --region RegionOne \
>   object-store internal http://controller:8080/v1/AUTH_%(tenant_id)s
+--------------+----------------------------------------------+
| Field        | Value                                        |
+--------------+----------------------------------------------+
| enabled      | True                                         |
| id           | 83e47740125d42bea679097908bff9fa             |
| interface    | internal                                     |
| region       | RegionOne                                    |
| region_id    | RegionOne                                    |
| service_id   | 1fbb8b2624694fc780291896d2f210a7             |
| service_name | swift                                        |
| service_type | object-store                                 |
| url          | http://controller:8080/v1/AUTH_%(tenant_id)s |
+--------------+----------------------------------------------+
[[email protected] ~]# openstack endpoint create --region RegionOne \
>   object-store admin http://controller:8080/v1
+--------------+----------------------------------+
| Field        | Value                            |
+--------------+----------------------------------+
| enabled      | True                             |
| id           | b75d6e318ae5481fbb602551a2e2278f |
| interface    | admin                            |
| region       | RegionOne                        |
| region_id    | RegionOne                        |
| service_id   | 1fbb8b2624694fc780291896d2f210a7 |
| service_name | swift                            |
| service_type | object-store                     |
| url          | http://controller:8080/v1        |
+--------------+----------------------------------+

yum install openstack-swift-proxy python-swiftclient python-keystoneclient python-keystonemiddleware memcached

從物件儲存的倉庫源中獲取代理服務的配置檔案（需要聯網，否則自己瀏覽器開啟自己貼上建立檔案）

curl -o /etc/swift/proxy-server.conf https://git.openstack.org/cgit/openstack/swift/plain/etc/proxy-server.conf-sample

[[email protected] ~]# curl -o /etc/swift/proxy-server.conf https://git.openstack.org/cgit/openstack/swift/plain/etc/proxy-server.conf-sample
  % Total    % Received % Xferd  Average Speed   Time    Time     Time  Current
                                 Dload  Upload   Total   Spent    Left  Speed
100 41023  100 41023    0     0  27880      0  0:00:01  0:00:01 --:--:-- 27887

vi /etc/swift/proxy-server.conf

[DEFAULT]
bind_port = 8080繫結埠
user = swift使用者
swift_dir = /etc/swift目錄

將原句註釋直接複製貼上（很長這是一句不要回車，不要改順序，不然會報錯8080）

[pipeline:main]
pipeline = catch_errors gatekeeper healthcheck proxy-logging cache container_sync bulk ratelimit authtoken keystoneauth container-quotas account-quotas slo dlo versioned_writes proxy-logging proxy-server


啟動自動賬戶建立

[app:proxy-server]
use = egg:swift#proxy
account_autocreate = True

配置操作員角色
這個配置是註釋了的可以直接包括頭[filter:keystoneauth]新增在配置最下面（不放心的去自己搜尋看看）

[filter:keystoneauth]
use = egg:swift#keystoneauth
operator_roles = admin,user

配置認證服務訪問
這個配置也是註釋了的可以直接包括頭[filter:authtoken]新增在配置最下面（不放心的去自己搜尋看看）

[filter:authtoken]
paste.filter_factory = keystonemiddleware.auth_token:filter_factory
auth_uri = http://controller:5000
auth_url = http://controller:35357
memcached_servers = controller:11211
auth_type = password
project_domain_name = default
user_domain_name = default
project_name = service
username = swift
password = 123456（建立使用者時你為swift設定的密碼）
delay_auth_decision = True

配置 memcached 的位置

[filter:cache]
use = egg:swift#memcache
memcache_servers = controller:11211