Openstack 租户

用户和租户

用户与租户是独立的概念，但用户可以在特定租户里拥有某种角色。一个用户可以在多个租户拥有管理员角色，每次增加新用户到OpenStack，都分配他们到各个租户。每次新实例（虚拟机）的创建，必须是在某个租户内。所有openStack资源的管理都是基于租户资源的管理。
租户tenant：是在OpenStack里用来划分和管理配置与资源的最根本方式。与项目（project）等价。
执行命令

创建项目

caas@caas-virtual-machine:~/devstack$ openstack project create --domain default \
>   --description "General Project" General
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | General Project                  |
| domain_id   | default                          |
| enabled     | True                             |
| id          | ffee4b11f4fb4a259d747f024d2477f3 |
| is_domain   | False                            |
| name        | General                          |
| parent_id   | default                          |
| tags        | []                               |
+-------------+----------------------------------+
#查看项目
caas@caas-virtual-machine:~/devstack$ openstack project list
+----------------------------------+--------------------+
| ID                               | Name               |
+----------------------------------+--------------------+
| 01e1d7de588d45a7b8534fb45cc05674 | invisible_to_admin |
| 05f8ea8496c74b35bd1e8bbb1621ad51 | service            |
| 24d7e9a77b9a4c15a9ce1b2119a7eb1d | alt_demo           |
| 399ae78852ad42108ddcb3063957d55f | demo               |
| dc370ab927054502bab4dfbdd9f83dfb | admin              |
| ffee4b11f4fb4a259d747f024d2477f3 | General            |
+----------------------------------+--------------------+

创建角色

caas@caas-virtual-machine:~/devstack$ openstack role create liu
+-----------+----------------------------------+
| Field     | Value                            |
+-----------+----------------------------------+
| domain_id | None                             |
| id        | 138da650371844319a61ee2df0a7ac8f |
| name      | liu                              |
+-----------+----------------------------------+

caas@caas-virtual-machine:~/devstack$ openstack role list
+----------------------------------+---------------+
| ID                               | Name          |
+----------------------------------+---------------+
| 12690e4a5ce04394974812b98306868c | ResellerAdmin |
| 138da650371844319a61ee2df0a7ac8f | liu           |
| 630be3d60f8e4cf1aae1e729be9e49f8 | Member        |
| ad4a230cd15540ebb6f9760b18d08638 | anotherrole   |
| cd9d64c3236f496bbfa78bd5ec472972 | admin         |
| e26077cac9b042c0a9e283b601787cda | service       |
+----------------------------------+---------------+

创建用户

caas@caas-virtual-machine:~/devstack$ openstack user create --domain default --password-prompt johndoe
User Password:
Repeat User Password:
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | default                          |
| enabled             | True                             |
| id                  | 54183e965e9a4e018d3688b31b19a2b5 |
| name                | johndoe                          |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+
caas@caas-virtual-machine:~/devstack$ openstack user list
+----------------------------------+-----------+
| ID                               | Name      |
+----------------------------------+-----------+
| 0c4ecc3f9221486896cf1038f5535c0f | demo      |
| 45b1de5cc4704cfdaff9acf03c1c69ff | placement |
| 4c2aac96611c436c980a25f560684ea4 | neutron   |
| 54183e965e9a4e018d3688b31b19a2b5 | johndoe   |
| 6407dd59f1c04058be2c064ef3ab0ab6 | admin     |
| 64ca5298e15e4c709574a1ac1f70932c | alt_demo  |
| ca154b079e6b45c0ae57a242b0ce4754 | nova      |
| dbd066432f1e4310a84ba0ceb5363ddd | cinder    |
| e96ec55ca22a4d49bbdeecc872abdc0f | glance    |
+----------------------------------+-----------+

授权项目

添加Member角色到General项目的johndoe用户

openstack role add --project General --user johndoe Member