[Openstack-operators] keystone tenants vs. nova projects.

Lorin Hochstein lorin at nimbisservices.com
Thu May 24 18:43:53 UTC 2012

On May 24, 2012, at 2:39 PM, Christian Parpart wrote:

> On Thu, May 10, 2012 at 11:49 PM, Christian Parpart <trapni at gmail.com> wrote:
> Hey all,
> I am wondering how these two terms are related with each other.
> I now know, that both terms are (kind of) interchangeable, however,
> I wonder why then we have two database tables (keystone.tenants
> and nova.projects) for the same thing, or, I have to actively populate
> the latter to make actual use of it from within the dashboard / nova.
> Can anyone please fix my misinterpretion, or clarify, why I (as an admin)
> need to explicitly invoke `nova-manage project create .... && ... add ..."?
> nobody?
> I still can't distinguish here, even though I am working with OpenStack for quite a few weeks now :-(
> Best regards,
> Christian.

It's a legacy thing. The initial implementation of nova (before keystone) implemented its own authorization and had "projects". When keystone was implemented it called these "tenants" instead, and nobody ever went through the nova code and did a search and replace. 

Take care,

Lorin Hochstein
Lead Architect - Cloud Services
Nimbis Services, Inc.

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-operators/attachments/20120524/d54601ed/attachment-0002.html>

More information about the Openstack-operators mailing list