用户和租户
用户与租户是独立的概念,但用户可以在特定租户里拥有某种角色。一个用户可以在多个租户拥有管理员角色,每次增加新用户到OpenStack,都分配他们到各个租户。每次新实例(虚拟机)的创建,必须是在某个租户内。所有openStack资源的管理都是基于租户资源的管理。
租户tenant:是在OpenStack里用来划分和管理配置与资源的最根本方式。与项目(project)等价。
执行命令
创建项目
caas@caas-virtual-machine:~/devstack$ openstack project create --domain default \
> --description "General Project" General
+-------------+----------------------------------+
| Field | Value |
+-------------+----------------------------------+
| description | General Project |
| domain_id | default |
| enabled | True |
| id | ffee4b11f4fb4a259d747f024d2477f3 |
| is_domain | False |
| name | General |
| parent_id | default |
| tags | [] |
+-------------+----------------------------------+
#查看项目
caas@caas-virtual-machine:~/devstack$ openstack project list
+----------------------------------+--------------------+
| ID | Name |
+----------------------------------+--------------------+
| 01e1d7de588d45a7b8534fb45cc05674 | invisible_to_admin |
| 05f8ea8496c74b35bd1e8bbb1621ad51 | service |
| 24d7e9a77b9a4c15a9ce1b2119a7eb1d | alt_demo |
| 399ae78852ad42108ddcb3063957d55f | demo |
| dc370ab927054502bab4dfbdd9f83dfb | admin |
| ffee4b11f4fb4a259d747f024d2477f3 | General |
+----------------------------------+--------------------+
创建角色
caas@caas-virtual-machine:~/devstack$ openstack role create liu
+-----------+----------------------------------+
| Field | Value |
+-----------+----------------------------------+
| domain_id | None |
| id | 138da650371844319a61ee2df0a7ac8f |
| name | liu |
+-----------+----------------------------------+
caas@caas-virtual-machine:~/devstack$ openstack role list
+----------------------------------+---------------+
| ID | Name |
+----------------------------------+---------------+
| 12690e4a5ce04394974812b98306868c | ResellerAdmin |
| 138da650371844319a61ee2df0a7ac8f | liu |
| 630be3d60f8e4cf1aae1e729be9e49f8 | Member |
| ad4a230cd15540ebb6f9760b18d08638 | anotherrole |
| cd9d64c3236f496bbfa78bd5ec472972 | admin |
| e26077cac9b042c0a9e283b601787cda | service |
+----------------------------------+---------------+
创建用户
caas@caas-virtual-machine:~/devstack$ openstack user create --domain default --password-prompt johndoe
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field | Value |
+---------------------+----------------------------------+
| domain_id | default |
| enabled | True |
| id | 54183e965e9a4e018d3688b31b19a2b5 |
| name | johndoe |
| options | {} |
| password_expires_at | None |
+---------------------+----------------------------------+
caas@caas-virtual-machine:~/devstack$ openstack user list
+----------------------------------+-----------+
| ID | Name |
+----------------------------------+-----------+
| 0c4ecc3f9221486896cf1038f5535c0f | demo |
| 45b1de5cc4704cfdaff9acf03c1c69ff | placement |
| 4c2aac96611c436c980a25f560684ea4 | neutron |
| 54183e965e9a4e018d3688b31b19a2b5 | johndoe |
| 6407dd59f1c04058be2c064ef3ab0ab6 | admin |
| 64ca5298e15e4c709574a1ac1f70932c | alt_demo |
| ca154b079e6b45c0ae57a242b0ce4754 | nova |
| dbd066432f1e4310a84ba0ceb5363ddd | cinder |
| e96ec55ca22a4d49bbdeecc872abdc0f | glance |
+----------------------------------+-----------+
授权项目
添加Member角色到General项目的johndoe用户
openstack role add --project General --user johndoe Member