<html><body><div style="font-family: Arial; font-size: 12pt; color: #000000"><div>Hi, <br><br>I have some questions about instance quota, and instance access authorization. <br><br>Openstack version is Havana (nova --version 2.15.0, keystone --version 0.3.2) <br><br>I plan to use a small openstack project/tenant as an online virtual computer lab room. <br>The project/tenant instance quota will be limited to 12 or 24 instances (as in a real lab room, there're 12 or 24 workstations). <br>Keystone user database will point to our LDAP server where student posixaccounts are managed. Amount of potential users is around 800, ( maybe several thousand in the future when keystone will be saml/shibboleth compatible). <br><br>A user will be restricted to 1 instance at a time, as in a real lab room a student can use 1 workstation at a time. <br><br>The main idea is : <br>- each student can access the online lab room.to launch an instance choosen among a small set of pre-defined images or flavors, <br>- when tenant instance quota is reached, lab room is full, other sutdents will have to wait untill one or more instances being freed by their owners, <br><br>Two questions : <br>1) Is there a simple way to set per-user default instance quota to 1 and tenant instance quota to 12 ? <br>2) how can I restrict instance access (console, reboot command,...) only to the owner of that instance ? <br><br>Some ideas ? <br><br>Regards. <br><br></div><div><br></div><div><span name="x"></span><br> -----oOo-----<br> Jacques Landru<br> mel: landru~hat~telecom-lille.fr<br> tel: +33 (0)3 2033 5556<br> fax: +33 (0)3 2033 5598<br><div><br></div> Telecom Lille<br> Cite scientifique, rue G. Marconi, BP20145<br> 59653 VILLENEUVE D'ASCQ Cedex<br> web: http://www.telecom-lille.fr<br> Tel: +33 (0)3 2033 5577 <br> Fax: +33 (0)3 2033 5599 <br> -----oOo-----<br><div><br></div><span name="x"></span><br></div><div><br></div></div></body></html>