[openstack-dev] [all] tenant vs. project

Brant Knudson blk at acm.org
Fri Feb 12 14:52:43 UTC 2016


On Fri, Feb 12, 2016 at 7:42 AM, Sean Dague <sean at dague.net> wrote:

> On 02/12/2016 08:30 AM, Dean Troyer wrote:
> > On Fri, Feb 12, 2016 at 6:01 AM, Sean Dague <sean at dague.net
> > <mailto:sean at dague.net>> wrote:
> >
> >     OpenStack is wildly inconsistent in it's use of tenant vs. project.
> As
> >     someone that wasn't here at the beginning, I'm not even sure which
> one
> >     we are supposed to be transitioning from -> to.
> >
> >     At a minimum I'd like to make all of devstack use 1 term, which is
> the
> >     term we're trying to get to. That will help move the needle.
> >
> >     However, again, I'm not sure which one that is supposed to be
> (comments
> >     in various places show movement in both directions). So people with
> >     deeper knowledge here, can you speak up as to which is the deprecated
> >     term and which is the term moving forward.
> >
> >
> > IIRC Nova started with project, until the marriage with Rax, when many
> > things changed, although the project -> tenant change may have never
> > been completed.  Keystone v3 started the movement back to project.
> > OpenStackClient made the commitment from the beginning to present
> > exactly one term to the user in all cases, and we chose project.
> >
> > I've thought about making that change in DevStack many times, and would
> > love to see it happen.  Somehow it never gets to the top of the queue.
> > And now in a plugin world, it'll be a bit harder to maintain
> compatibility.
>
> Hmmm... one issue with that:
>
> keystone only supports tenant_id in their service catalog for
> replacement, not project_id - https://review.openstack.org/#/c/279523/.
>
> Keystone folks, any idea if that's going to be adjusted?
>
>         -Sean
>
>
Proposed the change to keystone here:
https://review.openstack.org/#/c/279576/

As an excuse for not supporting this earlier, the replacement of
$(tenant_id)s, $(user_id)s, etc., in the service catalog is considered a
legacy feature so this has been neglected.

- Brant

--
> Sean Dague
> http://dague.net
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack-dev/attachments/20160212/6b60d5ff/attachment.html>


More information about the OpenStack-dev mailing list