[openstack-dev] [Keystone][Glance] Hierarchical multitenancy and Glance?
Geoff Arnold
geoff at geoffarnold.com
Tue Apr 28 06:10:36 UTC 2015
Use cases:
https://wiki.openstack.org/wiki/HierarchicalMultitenancy <https://wiki.openstack.org/wiki/HierarchicalMultitenancy>
Blueprints:
(Kilo):
https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy <https://blueprints.launchpad.net/keystone/+spec/hierarchical-multitenancy>
https://blueprints.launchpad.net/keystone/+spec/reseller <https://blueprints.launchpad.net/keystone/+spec/reseller>
(Liberty):
https://blueprints.launchpad.net/nova/+spec/multiple-level-user-quota-management <https://blueprints.launchpad.net/nova/+spec/multiple-level-user-quota-management>
https://blueprints.launchpad.net/nova/+spec/nested-quota-driver-api <https://blueprints.launchpad.net/nova/+spec/nested-quota-driver-api>
(Pending):
https://blueprints.launchpad.net/horizon/+spec/hierarchical-projects <https://blueprints.launchpad.net/horizon/+spec/hierarchical-projects>
https://blueprints.launchpad.net/horizon/+spec/inherited-roles <https://blueprints.launchpad.net/horizon/+spec/inherited-roles>
As for adoption, it’s hard to say. The HMT work in Keystone was a necessary starting point, but in order to create a complete solution we really need the corresponding changes in Nova (quotas), Glance (resource visibility), Horizon (UI scoping), and probably Ceilometer (aggregated queries). We (Cisco) are planning to kick off a Stackforge project to knit all of these things together into a complete “reseller” federation system. I’m assuming that there will be other system-level compositions of the various pieces.
Geoff
> On Apr 27, 2015, at 9:48 PM, Tripp, Travis S <travis.tripp at hp.com> wrote:
>
> Geoff,
>
> Getting a spec on HMT would be helpful, as Nikhil mentioned.
>
> As a general question, what it the current adoption of domains / vs
> hierarchical projects? Is there a wiki or something that highlights what
> the desired path forward is with regard to domains?
>
> Thanks,
> Travis
>
> On 4/27/15, 7:16 PM, "Geoff Arnold" <geoff at geoffarnold.com> wrote:
>
>> Good points. I¹ll add some details. I¹m sure the Reseller guys will have
>> some comments.
>>
>> Geoff
>>
>>> On Apr 27, 2015, at 3:32 PM, Nikhil Komawar
>>> <nikhil.komawar at RACKSPACE.COM> wrote:
>>>
>>> Thanks Geoff. Added some notes and questions.
>>>
>>> -Nikhil
>>>
>>> ________________________________________
>>> From: Geoff Arnold <geoff at geoffarnold.com>
>>> Sent: Monday, April 27, 2015 5:50 PM
>>> To: OpenStack Development Mailing List (not for usage questions)
>>> Subject: [openstack-dev] [Keystone][Glance] Hierarchical multitenancy
>>> and Glance?
>>>
>>> In preparation for Vancouver, I¹ve been looking for blueprints and
>>> design summit discussions involving the application of the Keystone
>>> hierarchical multitenancy work to other OpenStack projects. One obvious
>>> candidate is Glance, where, for example, we might want domain-local
>>> resource visibility as a default. Despite my searches, I wasn¹t able to
>>> find anything. Did I miss something obvious?
>>>
>>> I¹ve added a paragraph to
>>> https://etherpad.openstack.org/p/liberty-glance-summit-topics to make
>>> sure it doesn¹t get overlooked.
>>>
>>> Cheers,
>>>
>>> Geoff
>>>
>>> _________________________________________________________________________
>>> _
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe:
>>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>>
>>> _________________________________________________________________________
>>> _
>>> OpenStack Development Mailing List (not for usage questions)
>>> Unsubscribe:
>>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>>
>> __________________________________________________________________________
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20150427/7bc171d4/attachment.html>
More information about the OpenStack-dev
mailing list