Open Stack

The problem I've run into though, is project is very well defined in a lot of users minds, and its not defined the same way openstack typically uses it. A lot of sites use project in a way that more closely maps to a keystone domain. Though that gets even muddier with keystone subprojects and domains all kind of merging together. Some other folks define projects closer to keystone groups. A single "project" may have permissions on multiple openstack projects.

Tenant as a term was much easier for me to teach users. Since they don't have a predefined notion of what it is. And get the notion that like a multitenant building, it gives them their own space in the greater building. IE, the "Foo" project has access to these 3 openstack "tenants"

Thanks,
Kevin
________________________________________
From: Adam Young [ayoung at redhat.com]
Sent: Friday, February 12, 2016 5:40 PM
To: openstack-dev at lists.openstack.org
Subject: Re: [openstack-dev] [all] tenant vs. project

On 02/12/2016 08:28 PM, Monty Taylor wrote:
> On 02/12/2016 06:40 PM, John Griffith wrote:
>>
>>
>> On Fri, Feb 12, 2016 at 5:01 AM, Sean Dague <sean at dague.net
>> <mailto:sean at dague.net>> wrote:
>>
>>     Ok... this is going to be one of those threads, but I wanted to
>> try to
>>     get resolution here.
>>
>>     OpenStack is wildly inconsistent in it's use of tenant vs.
>> project. As
>>     someone that wasn't here at the beginning, I'm not even sure
>> which one
>>     we are supposed to be transitioning from -> to.
>>
>>     At a minimum I'd like to make all of devstack use 1 term, which
>> is the
>>     term we're trying to get to. That will help move the needle.
>>
>>     However, again, I'm not sure which one that is supposed to be
>> (comments
>>     in various places show movement in both directions). So people with
>>     deeper knowledge here, can you speak up as to which is the
>> deprecated
>>     term and which is the term moving forward.
>>
>>              -Sean
>>
>>     --
>>     Sean Dague
>>     http://dague.net
>>
>> __________________________________________________________________________
>>     OpenStack Development Mailing List (not for usage questions)
>>     Unsubscribe:
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> <http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>
>> ​I honestly don't have any real feeling about one over the other; BUT I
>> applaud the fact that somebody was brave enough to raise the question
>> again.
>>
>> Sounds like Project is where we're supposed to be, so if we can get it
>> in Keystone we can all go work on updating it once and for all?​
>
> Tis all good in keystone. If you're using keystoneauth and keystone v3
> everything will work magically. However, there are still some steps
> locally for things like config files and whatnot.
>
>
> __________________________________________________________________________
>
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe:
> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
Thank you all.

The tenant vs project thing has been an annoyance for almost the entire
time I've been on OpenStack.  If we can standartdize on project moving
forward, it will make things better.


On a terminology thing:  when talking about Nova, Glance, etc instead of
using projects, I use the term services.  It makes it easier to distinguish.

Tenant never quite made sense to me. A tenant is the person that
occupies an apartment or building, but not the building itself.


Also, the term multi-tenancy implies a degree of isolation between users
that we never quite established between Keystone projects.




__________________________________________________________________________
OpenStack Development Mailing List (not for usage questions)
Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev