[openstack-dev] [savanna] multi-tenant support

Sergey Lukjanov slukjanov at mirantis.com
Wed Oct 2 19:27:20 UTC 2013


Hi Jon,

1. Yes, sure. All Savanna objects have tenant_id property and all of them are tenant-specific.

2. Admin credentials from savanna.conf are only used for checking auth tokens of incoming requests. There is a common practice to create such admin user in special service tenant w/ zero quotes for all resources. This user should have admin role to be able to check auth tokens. Additionally, we'll use this user to perform some long-term operation using Trusts API from Keystone API v3 (https://review.openstack.org/#/c/44706/). Savanna Dashboard supports multiple tenants. All resources-related operations are performed using credentials/tokens/trusts of specific Savanna users.

Sincerely yours,
Sergey Lukjanov
Savanna Technical Lead
Mirantis Inc.

On Oct 2, 2013, at 23:14, Jon Maron <jmaron at hortonworks.com> wrote:

> Hi,
> 
>  A couple of questions related to multi-tenancy:
> 
>  1)  Does savanna currently support multiple concurrent cluster creation requests from multiple users/tenants?
> 
>  2)  What is the significance of the admin credentials in savanna.conf?  Is there support for multiple tenants via the savanna dashboard?  How are those configured credentials leveraged in the context of a multi tenant environment?
> 
> -- Jon
> 
> 
> -- 
> CONFIDENTIALITY NOTICE
> NOTICE: This message is intended for the use of the individual or entity to 
> which it is addressed and may contain information that is confidential, 
> privileged and exempt from disclosure under applicable law. If the reader 
> of this message is not the intended recipient, you are hereby notified that 
> any printing, copying, dissemination, distribution, disclosure or 
> forwarding of this communication is strictly prohibited. If you have 
> received this communication in error, please contact the sender immediately 
> and delete it from your system. Thank You.
> 
> _______________________________________________
> OpenStack-dev mailing list
> OpenStack-dev at lists.openstack.org
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




More information about the OpenStack-dev mailing list