[openstack-dev] [all] tenant vs. project

Adam Young ayoung at redhat.com
Sat Feb 13 03:08:31 UTC 2016


On 02/12/2016 09:04 PM, Fox, Kevin M wrote:
> The problem I've run into though, is project is very well defined in a lot of users minds, and its not defined the same way openstack typically uses it. A lot of sites use project in a way that more closely maps to a keystone domain. Though that gets even muddier with keystone subprojects and domains all kind of merging together. Some other folks define projects closer to keystone groups. A single "project" may have permissions on multiple openstack projects.
>
> Tenant as a term was much easier for me to teach users. Since they don't have a predefined notion of what it is. And get the notion that like a multitenant building, it gives them their own space in the greater building. IE, the "Foo" project has access to these 3 openstack "tenants"

There are arguments for both, but we are not going to switch back to 
tenant.  That would only continue the confusion.  We've been working 
toward project for 4+ years now.

>
> Thanks,
> Kevin
> ________________________________________
> From: Adam Young [ayoung at redhat.com]
> Sent: Friday, February 12, 2016 5:40 PM
> To: openstack-dev at lists.openstack.org
> Subject: Re: [openstack-dev] [all] tenant vs. project
>
> On 02/12/2016 08:28 PM, Monty Taylor wrote:
>> On 02/12/2016 06:40 PM, John Griffith wrote:
>>>
>>> On Fri, Feb 12, 2016 at 5:01 AM, Sean Dague <sean at dague.net
>>> <mailto:sean at dague.net>> wrote:
>>>
>>>      Ok... this is going to be one of those threads, but I wanted to
>>> try to
>>>      get resolution here.
>>>
>>>      OpenStack is wildly inconsistent in it's use of tenant vs.
>>> project. As
>>>      someone that wasn't here at the beginning, I'm not even sure
>>> which one
>>>      we are supposed to be transitioning from -> to.
>>>
>>>      At a minimum I'd like to make all of devstack use 1 term, which
>>> is the
>>>      term we're trying to get to. That will help move the needle.
>>>
>>>      However, again, I'm not sure which one that is supposed to be
>>> (comments
>>>      in various places show movement in both directions). So people with
>>>      deeper knowledge here, can you speak up as to which is the
>>> deprecated
>>>      term and which is the term moving forward.
>>>
>>>               -Sean
>>>
>>>      --
>>>      Sean Dague
>>>      http://dague.net
>>>
>>> __________________________________________________________________________
>>>      OpenStack Development Mailing List (not for usage questions)
>>>      Unsubscribe:
>>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>>> <http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe>
>>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
>>>
>>> ​I honestly don't have any real feeling about one over the other; BUT I
>>> applaud the fact that somebody was brave enough to raise the question
>>> again.
>>>
>>> Sounds like Project is where we're supposed to be, so if we can get it
>>> in Keystone we can all go work on updating it once and for all?​
>> Tis all good in keystone. If you're using keystoneauth and keystone v3
>> everything will work magically. However, there are still some steps
>> locally for things like config files and whatnot.
>>
>>
>> __________________________________________________________________________
>>
>> OpenStack Development Mailing List (not for usage questions)
>> Unsubscribe:
>> OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
>> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> Thank you all.
>
> The tenant vs project thing has been an annoyance for almost the entire
> time I've been on OpenStack.  If we can standartdize on project moving
> forward, it will make things better.
>
>
> On a terminology thing:  when talking about Nova, Glance, etc instead of
> using projects, I use the term services.  It makes it easier to distinguish.
>
> Tenant never quite made sense to me. A tenant is the person that
> occupies an apartment or building, but not the building itself.
>
>
> Also, the term multi-tenancy implies a degree of isolation between users
> that we never quite established between Keystone projects.
>
>
>
>
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev
> __________________________________________________________________________
> OpenStack Development Mailing List (not for usage questions)
> Unsubscribe: OpenStack-dev-request at lists.openstack.org?subject:unsubscribe
> http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev




More information about the OpenStack-dev mailing list