在安装完keystone并利用keystone-manage命令同步数据库后,mysql(我使用的存储后端)中新加了如下表:
+------------------------+| Tables_in_keystone |+------------------------+| access_token || assignment || consumer || credential || domain || endpoint || endpoint_group || federation_protocol || group || id_mapping || identity_provider || idp_remote_ids || mapping || migrate_version || policy || policy_association || project || project_endpoint || project_endpoint_group || region || request_token || revocation_event || role || sensitive_config || service || service_provider || token || trust || trust_role || user || user_group_membership || whitelisted_config |+------------------------+
对它们进行分类,按照创建它们的代码所属的模块:
1. federation扩展
federation_protocolidentity_providerservice_provideridp_remote_idsmapping
2. oauth1扩展
access_tokenconsumerrequest_token
3. endpoint_filter扩展
endpoint_groupproject_endpointproject_endpoint_group
4. endpoint_policy扩展
policy_association
5. revoke扩展
revocation_event
6. assignment
assignmentrole
7. catalog
regionserviceendpoint
8. credential
credential
9. identity
usergroupuser_group_membership id_mapping
10.policy
policy
11. resource
domainproject whitelisted_config sensitive_config
12. token
token
13. trust
trusttrust_role
14.
migrate_version
明细
1.1 federation_protocol:
+------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || idp_id | varchar(64) | NO | PRI | NULL | || mapping_id | varchar(64) | NO | | NULL | |+------------+-------------+------+-----+---------+-------+
1.2 identity_provider:
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || enabled | tinyint(1) | NO | | NULL | || description | text | YES | | NULL | |+-------------+-------------+------+-----+---------+-------+
1.3 service_provider:
+--------------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+--------------------+--------------+------+-----+---------+-------+| auth_url | varchar(256) | NO | | NULL | || id | varchar(64) | NO | PRI | NULL | || enabled | tinyint(1) | NO | | NULL | || description | text | YES | | NULL | || sp_url | varchar(256) | NO | | NULL | || relay_state_prefix | varchar(256) | NO | | ss:mem: | | +--------------------+--------------+------+-----+---------+-------+
1.4 idp_remote_ids
+-----------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------+--------------+------+-----+---------+-------+| idp_id | varchar(64) | YES | MUL | NULL | || remote_id | varchar(255) | NO | PRI | NULL | |+-----------+--------------+------+-----+---------+-------+
1.5 mapping:
+-------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || rules | text | NO | | NULL | |+-------+-------------+------+-----+---------+-------+
2.1 access_token
+---------------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+---------------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || access_secret | varchar(64) | NO | | NULL | || authorizing_user_id | varchar(64) | NO | MUL | NULL | || project_id | varchar(64) | NO | | NULL | || role_ids | text | NO | | NULL | || consumer_id | varchar(64) | NO | MUL | NULL | || expires_at | varchar(64) | YES | | NULL | |+---------------------+-------------+------+-----+---------+-------+
2.2 consumer:
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || description | varchar(64) | YES | | NULL | || secret | varchar(64) | NO | | NULL | || extra | text | NO | | NULL | |+-------------+-------------+------+-----+---------+-------+
2.3 request_token:
+----------------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+----------------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || request_secret | varchar(64) | NO | | NULL | || verifier | varchar(64) | YES | | NULL | || authorizing_user_id | varchar(64) | YES | | NULL | || requested_project_id | varchar(64) | NO | | NULL | | | role_ids | text | YES | | NULL | | | consumer_id | varchar(64) | NO | MUL | NULL | | | expires_at | varchar(64) | YES | | NULL | | +----------------------+-------------+------+-----+---------+-------+
3.1 endpoint_group:
+-------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || name | varchar(255) | NO | | NULL | || description | text | YES | | NULL | || filters | text | NO | | NULL | |+-------------+--------------+------+-----+---------+-------+
3.2 project_endpoint:
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| endpoint_id | varchar(64) | NO | PRI | NULL | || project_id | varchar(64) | NO | PRI | NULL | |+-------------+-------------+------+-----+---------+-------+
3.3 project_endpoint_group:
+-------------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------------+-------------+------+-----+---------+-------+| endpoint_group_id | varchar(64) | NO | PRI | NULL | || project_id | varchar(64) | NO | PRI | NULL | |+-------------------+-------------+------+-----+---------+-------+
4 policy_association:
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || policy_id | varchar(64) | NO | | NULL | || endpoint_id | varchar(64) | YES | MUL | NULL | || service_id | varchar(64) | YES | | NULL | || region_id | varchar(64) | YES | | NULL | | +-------------+-------------+------+-----+---------+-------+
5. revocation_event:
+-----------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || domain_id | varchar(64) | YES | | NULL | || project_id | varchar(64) | YES | | NULL | || user_id | varchar(64) | YES | | NULL | || role_id | varchar(64) | YES | | NULL | | | trust_id | varchar(64) | YES | | NULL | | | consumer_id | varchar(64) | YES | | NULL | | | access_token_id | varchar(64) | YES | | NULL | | | issued_before | datetime | NO | | NULL | | | expires_at | datetime | YES | | NULL | | | revoked_at | datetime | NO | MUL | NULL | | | audit_id | varchar(32) | YES | | NULL | | | audit_chain_id | varchar(32) | YES | | NULL | | +-----------------+-------------+------+-----+---------+-------+
6.1 assignment:
+-----------+---------------------------------------------------------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------+---------------------------------------------------------------+------+-----+---------+-------+| type | enum('UserProject','GroupProject','UserDomain','GroupDomain') | NO | PRI | NULL | || actor_id | varchar(64) | NO | PRI | NULL | || target_id | varchar(64) | NO | PRI | NULL | || role_id | varchar(64) | NO | PRI | NULL | || inherited | tinyint(1) | NO | | NULL | |+-----------+---------------------------------------------------------------+------+-----+---------+-------+
6.2 role:
+-------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || name | varchar(255) | NO | UNI | NULL | || extra | text | YES | | NULL | |+-------+--------------+------+-----+---------+-------+
7.1 region:
+------------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+------------------+--------------+------+-----+---------+-------+| id | varchar(255) | NO | PRI | NULL | || description | varchar(255) | NO | | NULL | || parent_region_id | varchar(255) | YES | | NULL | || extra | text | YES | | NULL | |+------------------+--------------+------+-----+---------+-------+
7.2 service:
+---------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+---------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || type | varchar(255) | YES | | NULL | || enabled | tinyint(1) | NO | | 1 | || extra | text | YES | | NULL | |+---------+--------------+------+-----+---------+-------+
7.3 endpoint
+--------------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+--------------------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || legacy_endpoint_id | varchar(64) | YES | | NULL | || interface | varchar(8) | NO | | NULL | || service_id | varchar(64) | NO | MUL | NULL | || url | text | NO | | NULL | || extra | text | YES | | NULL | || enabled | tinyint(1) | NO | | 1 | | | region_id | varchar(255) | YES | MUL | NULL | | +--------------------+--------------+------+-----+---------+-------+
8. credential:
+------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+------------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || user_id | varchar(64) | NO | | NULL | || project_id | varchar(64) | YES | | NULL | || blob | text | NO | | NULL | || type | varchar(255) | NO | | NULL | || extra | text | YES | | NULL | |+------------+--------------+------+-----+---------+-------+
9.1 user:
+--------------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+--------------------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || name | varchar(255) | NO | | NULL | || extra | text | YES | | NULL | || password | varchar(128) | YES | | NULL | || enabled | tinyint(1) | YES | | NULL | || domain_id | varchar(64) | NO | MUL | NULL | | | default_project_id | varchar(64) | YES | | NULL | | +--------------------+--------------+------+-----+---------+-------+
9.2 group:
这张表的名称“group”和SQL关键字相同,因此查看的时候需要指定它是keystone.group。
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || domain_id | varchar(64) | NO | MUL | NULL | || name | varchar(64) | NO | | NULL | || description | text | YES | | NULL | || extra | text | YES | | NULL | |+-------------+-------------+------+-----+---------+-------+
9.3 user_group_membership:
+----------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+----------+-------------+------+-----+---------+-------+| user_id | varchar(64) | NO | PRI | NULL | || group_id | varchar(64) | NO | PRI | NULL | |+----------+-------------+------+-----+---------+-------+
9.4 id_mapping:
+-------------+----------------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+----------------------+------+-----+---------+-------+| public_id | varchar(64) | NO | PRI | NULL | || domain_id | varchar(64) | NO | MUL | NULL | || local_id | varchar(64) | NO | | NULL | || entity_type | enum('user','group') | NO | | NULL | |+-------------+----------------------+------+-----+---------+-------+
10. policy:
+-------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------+--------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || type | varchar(255) | NO | | NULL | || blob | text | NO | | NULL | || extra | text | YES | | NULL | |+-------+--------------+------+-----+---------+-------+
11.1 domain:
+---------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+---------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || name | varchar(64) | NO | UNI | NULL | || enabled | tinyint(1) | NO | | NULL | || extra | text | YES | | NULL | |+---------+-------------+------+-----+---------+-------+
11.2 project:
+-------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || name | varchar(64) | NO | | NULL | || extra | text | YES | | NULL | || description | text | YES | | NULL | || enabled | tinyint(1) | YES | | NULL | || domain_id | varchar(64) | NO | MUL | NULL | || parent_id | varchar(64) | YES | MUL | NULL | | +-------------+-------------+------+-----+---------+-------+
11.3 whitelisted_config:
+-----------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------+--------------+------+-----+---------+-------+| domain_id | varchar(64) | NO | PRI | NULL | || group | varchar(255) | NO | PRI | NULL | || option | varchar(255) | NO | PRI | NULL | || value | text | NO | | NULL | |+-----------+--------------+------+-----+---------+-------+
11.4 sensitive_config:
+-----------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------+--------------+------+-----+---------+-------+| domain_id | varchar(64) | NO | PRI | NULL | || group | varchar(255) | NO | PRI | NULL | || option | varchar(255) | NO | PRI | NULL | || value | text | NO | | NULL | |+-----------+--------------+------+-----+---------+-------+
12. token:
+----------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+----------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || expires | datetime | YES | MUL | NULL | || extra | text | YES | | NULL | || valid | tinyint(1) | NO | | NULL | || trust_id | varchar(64) | YES | MUL | NULL | || user_id | varchar(64) | YES | MUL | NULL | |+----------+-------------+------+-----+---------+-------+
13.1 trust:
+-----------------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------------+-------------+------+-----+---------+-------+| id | varchar(64) | NO | PRI | NULL | || trustor_user_id | varchar(64) | NO | | NULL | || trustee_user_id | varchar(64) | NO | | NULL | || project_id | varchar(64) | YES | | NULL | || impersonation | tinyint(1) | NO | | NULL | | | deleted_at | datetime | YES | | NULL | | | expires_at | datetime | YES | | NULL | | | remaining_uses | int(11) | YES | | NULL | | | extra | text | YES | | NULL | | +-----------------+-------------+------+-----+---------+-------+
13.2 trust_role:
+----------+-------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+----------+-------------+------+-----+---------+-------+| trust_id | varchar(64) | NO | PRI | NULL | || role_id | varchar(64) | NO | PRI | NULL | |+----------+-------------+------+-----+---------+-------+
14. migrate_version:
+-----------------+--------------+------+-----+---------+-------+| Field | Type | Null | Key | Default | Extra |+-----------------+--------------+------+-----+---------+-------+| repository_id | varchar(250) | NO | PRI | NULL | || repository_path | mediumtext | YES | | NULL | || version | int(11) | YES | | NULL | |+-----------------+--------------+------+-----+---------+-------+