Openstack 中, 以租户作为云主机隔离的单位

project 等同于 tenant

OpenStack Compute Service (nova) 作为认证时候, 称为 project

OpenStack Identity Service (keystone) 作为认证时候, 称为 tenant

在管理 openstack 时候, 需要添加独立的 project, 然后每个 project 具有独立的用户, 网络, 云主机

添加用户前需要添加对应 project

keystone 命令帮助
    tenant-create       Create new tenant.
    tenant-delete       Delete tenant.
    tenant-get          Display tenant details.
    tenant-list         List all tenants.
    tenant-update       Update tenant name, description, enabled status.
    bootstrap           Grants a new role to a new user on a new tenant, after
  --os-tenant-name <auth-tenant-name>
  --os-tenant-id <tenant-id>

添加 tenant

[root@station140 ~(keystone_admin)]# keystone tenant-create --name cloud
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |                                  |
|   enabled   |               True               |
|      id     | 9467f30b8bba4770a06a687e4584636b |   <- 创建后, 使用 keystone tenant-get cloud 能够重新调回信息
|     name    |              cloud               |
+-------------+----------------------------------+

列出 tenant

[root@station140 ~(keystone_admin)]# keystone tenant-list
+----------------------------------+----------+---------+
|                id                |   name   | enabled |
+----------------------------------+----------+---------+
| e3a71a59840c4e88b8740b789c3afb9c |  admin   |   True  |
| fa30a4cd2eba46f0b58d591b7335d660 | alt_demo |   True  |
| 9467f30b8bba4770a06a687e4584636b |  cloud   |   True  |
| 87c63116e3b4440eaa9640494b53cd43 |   demo   |   True  |
| bc95edec7a674bb8873d067d9ddedaec | services |   True  |
+----------------------------------+----------+---------+

[root@station140 ~(keystone_admin)]# keystone tenant-update --description="use for test." --enabled=true cloud
[root@station140 ~(keystone_admin)]# keystone tenant-get cloud
+-------------+----------------------------------+
|   Property  |              Value               |
+-------------+----------------------------------+
| description |          use for test.           |
|   enabled   |               True               |
|      id     | 9467f30b8bba4770a06a687e4584636b |
|     name    |              cloud               |
+-------------+----------------------------------+

删除 tenant

keystone tenant-delete 9467f30b8bba4770a06a687e4584636b