CL110 - ch02s02

Bookmark this page

P 1 2 3 4 5 6 7 8 9 10

Guided Exercise: Creating a Project Environment for Managing Applications and Resources

In this exercise, you will create and delete a domain and projects using the Dashboard and the OpenStack unified CLI.

Outcomes

You should be able to:

Create and delete domains using the OpenStack unified CLI.
Create and delete domains and projects using the OpenStack unified CLI.
Create and delete projects using the Dashboard.

As the student user on the workstation machine, use the lab command to prepare your system for this exercise.

This command ensures that all resources required for the exercise are present.

[student@workstation ~]$ lab project-manage start

Procedure 2.1. Instructions

On workstation as the user student, use the OpenStack unified CLI to create the MyCorp domain. Use the /home/student/admin-rc environment file to access OpenStack as the admin user.

On workstation, from the command line, source the identity environment file for the admin user to gain administrator rights.
```
[student@workstation ~]$ source ~/admin-rc
[student@workstation ~(admin)]$
```

Create the MyCorp domain. Use My Corp Domain as the description.

[student@workstation ~(admin)]$ openstack domain create \
> --description "My Corp Domain" MyCorp
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description | My Corp Domain                   |
| enabled     | True                             |
| id          | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| name        | MyCorp                           |
| options     | {}                               |
| tags        | []                               |
+-------------+----------------------------------+

Verify that the MyCorp domain has been created.

[student@workstation ~(admin)]$ openstack domain list
+----------------------------------+------------+---------+--------------------+
| ID                               | Name       | Enabled | Description        |
+----------------------------------+------------+---------+--------------------+
| 8350ad8d9e7d4f3aacfdd9a2a7d9a45e | MyCorp     | True    | My Corp Domain     |
...output omitted...
+----------------------------------+------------+---------+--------------------+

Create the developer1 user within the MyCorp domain, and verify it.

Create the user with the openstack user create command. Use the optional --password-prompt argument to have the command prompt for the password, or --password to set the password in the command line. Notice in the output the domain_id has the same has the same ID as the MyCorp domain.

[student@workstation ~(admin)]$ openstack user create \
> --domain MyCorp \
> --password redhat \
> developer1
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| domain_id           | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| enabled             | True                             |
| id                  | 3c348c3a943346eba2a810776f31cd02 |
| name                | developer1                       |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

Verify that the developer1 user has been created.

[student@workstation ~(admin)]$ openstack user list --domain MyCorp
+----------------------------------+------------+
| ID                               | Name       |
+----------------------------------+------------+
| 3c348c3a943346eba2a810776f31cd02 | developer1 |
+----------------------------------+------------+

Create the sales project within the MyCorp domain, and then give developer1 the member role.

Create the project with the openstack project create command.

[student@workstation ~(admin)]$ openstack project create \
> --domain MyCorp sales
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| enabled     | True                             |
| id          | 22041d8b3a4e4b449dd01cf4cff5b133 |
| is_domain   | False                            |
| name        | sales                            |
| options     | {}                               |
| parent_id   | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| tags        | []                               |
+-------------+----------------------------------+

Verify that the sales project has been created.

[student@workstation ~(admin)]$ openstack project list --domain MyCorp
+----------------------------------+---------+
| ID                               | Name    |
+----------------------------------+---------+
| 22041d8b3a4e4b449dd01cf4cff5b133 | sales   |
+----------------------------------+---------+

Assign the member role to developer1 in the sales project.

[student@workstation ~(admin)]$ openstack role add \
> --user-domain MyCorp \
> --user developer1 \
> --project-domain MyCorp \
> --project sales \
> member

Verify that the member role has been applied to the developer1 user.

[student@workstation ~(admin)]$ openstack role assignment list \
> --effective \
> --names \
> --user-domain MyCorp \
> --user developer1
+----------+-------------------+-------+----------------+--------+-----------+
| Role     | User              | Group | Project        | Domain | Inherited |
+----------+-------------------+-------+----------------+--------+-----------+
| member   | developer1@MyCorp |       | sales@MyCorp   |        | False     |
| reader   | developer1@MyCorp |       | sales@MyCorp   |        | False     |
+----------+-------------------+-------+----------------+--------+-----------+

Create a hierarchical project named SalesDev, use sales as the parent project, and confirm the relationship.

Create the project with the openstack project create command, and use the --parent option.

[student@workstation ~(admin)]$ openstack project create \
> --parent sales \
> --domain MyCorp \
> SalesDev
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| enabled     | True                             |
| id          | bb641dff4d64467fb27d65293db33154 |
| is_domain   | False                            |
| name        | SalesDev                         |
| options     | {}                               |
| parent_id   | 22041d8b3a4e4b449dd01cf4cff5b133 |
| tags        | []                               |
+-------------+----------------------------------+

Verify that the SalesDev project has been created.

[student@workstation ~(admin)]$ openstack project list --domain MyCorp
+----------------------------------+------------+
| ID                               | Name       |
+----------------------------------+------------+
| 22041d8b3a4e4b449dd01cf4cff5b133 | sales      |
| bb641dff4d64467fb27d65293db33154 | SalesDev   |
+----------------------------------+------------+

Notice that the parent_id field has the same ID as in the previous command.

[student@workstation ~(admin)]$ openstack project show SalesDev --domain MyCorp
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | 8350ad8d9e7d4f3aacfdd9a2a7d9a45e |
| enabled     | True                             |
| id          | bb641dff4d64467fb27d65293db33154 |
| is_domain   | False                            |
| name        | SalesDev                         |
| options     | {}                               |
| parent_id   | 22041d8b3a4e4b449dd01cf4cff5b133 |
| tags        | []                               |
+-------------+----------------------------------+

Delete the SalesDev project.

Use the openstack project delete command with the --domain argument to delete the project.

[student@workstation ~(admin)]$ openstack project delete \
> --domain MyCorp \
> SalesDev

Verify that the SalesDev project has been deleted.

[student@workstation ~(admin)]$ openstack project list --domain MyCorp
+----------------------------------+------------+
| ID                               | Name       |
+----------------------------------+------------+
| 22041d8b3a4e4b449dd01cf4cff5b133 | sales      |
+----------------------------------+------------+

Delete the MyCorp domain.

Use the openstack domain set command with the --disable argument to disable the domain.
```
[student@workstation ~(admin)]$ openstack domain set \
> --disable \
> MyCorp
```

Delete the domain with the openstack domain delete command.

[student@workstation ~(admin)]$ openstack domain delete MyCorp

Verify that the MyCorp domain has been deleted.

[student@workstation ~(admin)]$ openstack domain list
+----------------------------------+------------+---------+--------------------+
| ID                               | Name       | Enabled | Description        |
+----------------------------------+------------+---------+--------------------+
...output omitted...
| default                          | Default    | True    | The default domain |
| f0bd72d8acfe4cd9842b476caa7bf269 | Example    | True    | Example Domain     |
+----------------------------------+------------+---------+--------------------+

Note

Use the Dashboard to perform the following steps.

On workstation, open Firefox and browse to http://dashboard.overcloud.example.com. Log in to the Dashboard using default as the domain, admin as the user name, and redhat as the password.
Use the Dashboard to create the sales project using default project quotas.
1. Click Project at the upper right of the window, and then click admin.
2. Navigate to Identity → Projects and then click Create Project.
3. Enter sales in the Name field and Sales Project in the Description field. Leave the Enabled check box selected.
  Click Create Project and then log out of the Dashboard.

Finish

On the workstation machine, use the lab command to complete this exercise. This is important to ensure that resources from previous exercises do not impact upcoming exercises.

[student@workstation ~]$ lab project-manage finish

This concludes the guided exercise.

Discuss Red Hat OpenStack Administration I: Core Operations for Domain Operators

Go to community

Red Hat OpenStack Administration I: Core Operations for Domain Operators (CL110)

Haley_Ruccio

1 sie 2023

Learn to operate a Red Hat® OpenStack Platform private cloud and manage domain resources to secure and deploy modern, scalable cloud applications, networks and storageRed Hat OpenStack Administration I: Core Operations for Domain Operators (CL110) teaches you how to operate and manage a production Red Hat OpenStack Platform (RHOSP) single-site overcloud. You will learn how to create secure project environments in which to provision resources and manage security privileges that cloud users need to deploy scalable cloud applications. You will learn about OpenShift integration with load balancers, identity management, monitoring, proxies, and storage. You will also develop more troubleshooting and Day 2 operations skills in this course.This course is based on Red Hat OpenStack Platform 16.1.Course content summaryStudents in the Red Hat OpenStack Administration I: Core Operations for Domain Operators (CL110) course will focus on performing both routine and specialized tasks that are necessary to manage a production OpenStack overcloud domain. Students will manage OpenStack using both web-based and command-line interfaces. Essential skills covered in the course include the following:Launch instances to satisfy various use case examples.Manage domains, projects, users, roles, and quota in a multitenant environment.Manage networks, subnets, routers, and floating IP addresses.Manage instance security with group rules and access keys.Create and manage block, object and shared storage within OpenStack.Perform instance launch customization with cloud-init.Deploy scalable applications using stack templates.Audience for this courseThis course is designed for cloud users who deploy application instances and stacks, domain operators who manage resources and security for cloud users, and any other cloud personnel interested in, or responsible for, maintaining applications on private or hybrid OpenStack clouds. Any cloud persona, or personnel with roles that include performing technology evaluation, should attend this course to learn RHOSP operation and application deployment methods.Prerequisites for this courseBecome a Red Hat Certified System Administrator (RHCSA) or demonstrate equivalent experienceIf you are not a RHCSA, you can take a skill assessment to gauge your level of knowledge.

Welcome to the Red Hat OpenStack Administration I (CL110) group in the Red Hat Learning Community!

Syed

31 lip 2023

We are excited to launch a space dedicated to the Red Hat Training course CL110! To gain the most value from this group - click the "Join Group" button in the upper right hand corner of the group home page.We encourage group members to collaborate in this group to discuss topics, ask questions, share best practices and tips, provide course feedback, and share their accomplishments as it relates to CL110.Read more about Red Hat OpenStack Administration I: Core Operations for Domain Operators here.

Revision: cl110-16.1-4c76154