[openstack-dev] [savanna] multi-tenant support
Sergey Lukjanov
slukjanov at mirantis.com
Wed Oct 2 19:27:20 UTC 2013
Hi Jon,
1. Yes, sure. All Savanna objects have tenant_id property and all of them are tenant-specific.
2. Admin credentials from savanna.conf are only used for checking auth tokens of incoming requests. There is a common practice to create such admin user in special service tenant w/ zero quotes for all resources. This user should have admin role to be able to check auth tokens. Additionally, we'll use this user to perform some long-term operation using Trusts API from Keystone API v3 (https://review.openstack.org/#/c/44706/). Savanna Dashboard supports multiple tenants. All resources-related operations are performed using credentials/tokens/trusts of specific Savanna users.
Sincerely yours,
Sergey Lukjanov
Savanna Technical Lead
Mirantis Inc.
On Oct 2, 2013, at 23:14, Jon Maron <jmaron at hortonworks.com> wrote:
> Hi,
>
> A couple of questions related to multi-tenancy:
>
> 1) Does savanna currently support multiple concurrent cluster creation requests from multiple users/tenants?
>
> 2) What is the significance of the admin credentials in savanna.conf? Is there support for multiple tenants via the savanna dashboard? How are those configured credentials leveraged in the context of a multi tenant environment?
>
> -- Jon
>
>
> --
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or entity to
> which it is addressed and may contain information that is confidential,
> privileged and exempt from disclosure under applicable law. If the reader
> of this message is not the intended recipient, you are hereby notified that
> any printing, copying, dissemination, distribution, disclosure or
> forwarding of this communication is strictly prohibited. If you have
> received this communication in error, please contact the sender immediately
> and delete it from your system. Thank You.
>
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
More information about the OpenStack-dev
mailing list