[Openstack-operators] multiple networks vs keystone tenants

Linux Datacenter linuxdatacenter at gmail.com
Mon Feb 20 19:09:28 UTC 2012


Hi,

I want to set up a dedicated network for a tenant. To do this, I use
--project_id <keystone_tenant_id> option in nova-manage network create:

nova-manage network create
--fixed_range_v4=192.168.20.0/24--project_id=bc955aeac4ff4e0db0bbf10320ec3772
--label=project2
--gateway=192.168.20.1 --dns1=8.8.8.8 --multi_host=T --bridge=br311
--bridge_interface=eth0.311

I also have my default network, which all projects share and allocate
addresses from it.

And here I run into a problem:
I boot the vm and it looks like the assignement of network to a project
does not work. All my machines are assigned IP-s from 2 networks regardles
if I am a member of the test2 project or not:

144f9ba8-339f-428c-88e9-a256c6aba956 | rwar  | ACTIVE |
public=192.168.0.23; project2=192.168.20.14      (2 ADDRESSES!!!!!)

How can I enforce that users from project2 get only addresses from project2
net.
And how can I enforce that users from outside project2 get addresses from
the public pool?

Cheers.
-- 
checkout my blog on linux clusters:
-- linuxdatacenter.blogspot.com --
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20120220/8f9a0d6c/attachment-0002.html>


More information about the Openstack-operators mailing list