Introduced
Rackspace & NASA
A combination of software open source projects
Complex installation Configuration
System management platform for Infrastructure resources (network, compute, storage)
Individual wells vs Water plants
Components & Principles
Horizon-UI Module
Cloud Administrator
Normal User
Keystone--Identity Service module * Control core
Concept:
User: Users, on behalf of the person or program that can be accessed through Keystone, user authentication information (e.g., password, API key, etc.)
Tenant: Tenant, he is a collection of resources that can be accessed in each service
role: Roles, roles represents a set of resource permissions that a group of users can access
Service: Services, such as Nova,glance,swift services, are registered on Keystone
Endpoint: An access point exposed by a service. If you need access to a service, you must know his Endpoint.
Token
: Access to resource tokens, analogous to keys, with time limit
services provided by Keystone:
Identity Service authentication Credentials
Token
Service verifies and manages tokens used to authenticate the requested identity
The
Catalog Service provides a service registry for endpoint Discovery
policy rule-based authentication engine
Nova-COMPUTE Services OpenStack Instance Lifecycle Management Compute Resource Management provides rest-style API components out of the way:
nova-api #api接口
nova-scheduler #调度中枢
nova-compute #计算模组
UR-> Nova-a Pi-> Nova-scheduler-> Nova-compute
Glance--Mirror service
Swift--Object storage service One of the first two services of OpenStack high-availability distributed object Storage Service Locator: Account----container---object can be used via HTTP (S), Object API and S3 Interface Access cinder--block storage service manages all block storage devices for VM services neutron--network Services provides virtual network functionality in a cloud computing environment three modes: Flat mode flat DHCP mode VLAN mode
Access Control Flow
*quantum is the predecessor of Neutron.
From for notes (Wiz)
Getting Started with OpenStack 1