openstack租户管理_openstack 租户、用户管理

创建domain

[root@cc01 ~]# openstack domain create --description "Default Domain" default

+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | Default Domain |

| enabled | True |

| id | 011fbf8c04f1479ab1a4e49b019b22d1 |

| name | default |

+-------------+----------------------------------+

一、租户管理

创建租户

[root@cc10 ~]# openstack project create --domain default --description "hzbtest Project"hzbtest+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | hzbtest Project |

| domain_id | default |

| enabled | True |

| id | a18a50c3e0204fd9841751f0dbe93d66 |

| is_domain | False |

| name | hzbtest |

| parent_id | default |

+-------------+----------------------------------+

修改租户属性(以修改enabled和name为例子)

openstack project set --disable --name=hzbtest2 hzbtest

[root@cc10 ~]# openstack project show hzbtest2+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | hzbtest Project |

| domain_id | default |

| enabled | False |

| id | a18a50c3e0204fd9841751f0dbe93d66 |

| is_domain | False |

| name | hzbtest2 |

| parent_id | default |

+-------------+----------------------------------+

删除租户

openstack project delete hzbtest2

查询租户列表

[root@cc01 ~]# openstack project list+----------------------------------+--------------------+

| ID | Name |

+----------------------------------+--------------------+ |

| 91550f3ddf5940ea9a9d17daaf6d1f5e | admin |

查看租户详情：

[root@cc01 ~]# openstack project show admin+-------------+-----------------------------------------------+

| Field | Value |

+-------------+-----------------------------------------------+

| description | Bootstrap project for initializing the cloud. |

| domain_id | default |

| enabled | True |

| id | 91550f3ddf5940ea9a9d17daaf6d1f5e |

| is_domain | False |

| name | admin |

| parent_id | default |

+-------------+-----------------------------------------------+

二、用户管理

创建用户

[root@cc10 ~]# openstack user create --domain default --password-prompt hzbtest

User Password:

Repeat User Password:+-----------+----------------------------------+

| Field | Value |

+-----------+----------------------------------+

| domain_id | default |

| enabled | True |

| id | a51a551644ed42ad84d7580be91f7fae |

| name | hzbtest |

+-----------+----------------------------------+

查看用户详情

[root@cc10 ~]# openstack user show hzbtest+-----------+----------------------------------+

| Field | Value |

+-----------+----------------------------------+

| domain_id | default |

| enabled | True |

| id | a51a551644ed42ad84d7580be91f7fae |

| name | hzbtest |

+-----------+----------------------------------+

更新用户信息

usage: openstack user set [-h] [--name ] [--project ]

[--project-domain ]

[--password ] [--password-prompt]

[--email ]

[--description ] [--enable | --disable]

[root@cc10 ~]# openstack user set --email=hzbtest@qq.com --description=xxx --password=12345678hzbtest

[root@cc10~]# openstack user show hzbtest+-------------+----------------------------------+

| Field | Value |

+-------------+----------------------------------+

| description | xxx |

| domain_id | default |

| email | hzbtest@qq.com |

| enabled | True |

| id | a51a551644ed42ad84d7580be91f7fae |

| name | hzbtest |

+-------------+----------------------------------+

删除用户

openstack user delete hzbtest

查询用户列表

[root@cc01 ~]# openstack user list+----------------------------------+---------------------------+

| ID | Name |

+----------------------------------+---------------------------+

| 01eef5e310e141cc8a3687dabc643676 | test_user |

查询某一租户下的所有用户

[root@cc01 ~]# openstack user list --project=admin+----------------------------------+------------------+

| ID | Name |

+----------------------------------+------------------+

| f05b4e3b6585429e98f178934d71ae3e | admin |

| 99955f8cefeb4a6f945e06ec3f424b5d | pulsar@admin.com |

| 01eef5e310e141cc8a3687dabc643676 | test_user |

| 6e6d64905b0f419daaf424f678733dec | test123409 |

+----------------------------------+------------------+

三、角色管理

创建角色

[root@cc10 ~]# openstack role create hzb-role+-----------+----------------------------------+

| Field | Value |

+-----------+----------------------------------+

| domain_id | None |

| id | 72744157e8ad4267ae7b8ffc4c00fb03 |

| name | hzb-role |

+-----------+----------------------------------+

角色相关的方法

[root@cc10 ~]# openstack role --help

Command"role"matches:

role add

role assignment list

role create

role delete

role list

role remove

rolesetrole show

将租户和用户加入到角色

openstack role add --project hzbtest --user hzbtest hzb-role

查看租户和用户的关系

[root@cc10 ~]# openstack role assignment list --user=hzbtest+----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+

| Role | User | Group | Project | Domain | Inherited |

+----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+

| 72744157e8ad4267ae7b8ffc4c00fb03 | a51a551644ed42ad84d7580be91f7fae | | a21daa122cb54ca68fdcfeaad843c081 | | False |

+----------------------------------+----------------------------------+-------+----------------------------------+--------+-----------+

将role移除租户和用户

openstack role remove --user=hzbtest --project=hzbtest hzb-role