CL110 - ch02s07

Bookmark this page

Lab: Managing Application Projects in a Multitenant Cloud

In this lab, you will manage a project and its users, and set quotas for the project. You can perform the tasks in this lab using either the Dashboard or the OpenStack unified CLI.

Outcomes

You should be able to:

Create and delete a project.
Create, delete, and add a user to a project.
Set project quotas.

As the student user on the workstation machine, use the lab command to prepare your system for this exercise.

This command ensures that all resources required for the exercise are present.

[student@workstation ~]$ lab project-review start

Procedure 2.4. Instructions

This guided exercise is in two parts. In part 1 you use the CLI and in part 2 you use the Dashboard.

Source the /home/student/operator1-production-rc credentials file. Create the manufacturing project in the MyCorp domain. Create the projects east and west as children of the manufacturing project.

Source the /home/student/operator1-production-rc credentials file.
```
[student@workstation ~]$ source operator1-production-rc
```

Create the manufacturing project with the openstack project create command.

[student@workstation ~(operator1-production)]$ openstack project create \
> --domain MyCorp manufacturing
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | f0bd72d8acfe4cd9842b476caa7bf269 |
| enabled     | True                             |
| id          | a0b16a70581d40aaac1801ab30916cd0 |
| is_domain   | False                            |
| name        | manufacturing                    |
| options     | {}                               |
| parent_id   | f0bd72d8acfe4cd9842b476caa7bf269 |
| tags        | []                               |
+-------------+----------------------------------+

Create the east project with the parent project set to manufacturing.

[student@workstation ~(operator1-production)]$ openstack project create \
> --domain MyCorp --parent manufacturing east
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | f0bd72d8acfe4cd9842b476caa7bf269 |
| enabled     | True                             |
| id          | cecd922d022c44d28d02f2965d1af5f1 |
| is_domain   | False                            |
| name        | east                             |
| options     | {}                               |
| parent_id   | a0b16a70581d40aaac1801ab30916cd0 |
| tags        | []                               |
+-------------+----------------------------------+

Create the west project with the parent project set to manufacturing.

[student@workstation ~(operator1-production)]$ openstack project create \
> --domain MyCorp --parent manufacturing west
+-------------+----------------------------------+
| Field       | Value                            |
+-------------+----------------------------------+
| description |                                  |
| domain_id   | f0bd72d8acfe4cd9842b476caa7bf269 |
| enabled     | True                             |
| id          | e53426c5adac4a1f95ce7f8e2946eeca |
| is_domain   | False                            |
| name        | west                             |
| options     | {}                               |
| parent_id   | a0b16a70581d40aaac1801ab30916cd0 |
| tags        | []                               |
+-------------+----------------------------------+

Create the user user within the MyCorp domain, with a primary project of manufacturing and a password of redhat.

Create the user user with redhat as the password in the Domain domain.

[student@workstation ~(operator1-production)]$ openstack user create \
> --project-domain MyCorp \
> --project manufacturing \
> --domain MyCorp \
> --password redhat \
> user
+---------------------+----------------------------------+
| Field               | Value                            |
+---------------------+----------------------------------+
| default_project_id  | a0b16a70581d40aaac1801ab30916cd0 |
| domain_id           | MyCorp                           |
| enabled             | True                             |
| id                  | fc1a097f1e4c4d738364334d768f7dc4 |
| name                | user                             |
| options             | {}                               |
| password_expires_at | None                             |
+---------------------+----------------------------------+

Assign user the member and admin roles in manufacturing.

Assign the member role to the user user for the manufacturing project.

[student@workstation ~(operator1-production)]$ openstack role add \
> --user-domain MyCorp \
> --user user \
> --project-domain MyCorp \
> --project manufacturing \
> member

Assign the admin role to the user user for the manufacturing project.

[student@workstation ~(operator1-production)]$ openstack role add \
> --user-domain MyCorp \
> --user user \
> --project-domain MyCorp \
> --project manufacturing \
> admin

As user, verify the existing quotas on east, and then restrict the amount of RAM available to 40000 MiB and the number of cores to 10. Verify the existing quotas on west, and then restrict the number of instances to 10 and the number of cores to 16.

Source the /home/student/user-manufacturing-rc credentials file.

[student@workstation ~(operator1-production)]$ source ~/user-manufacturing-rc
[student@workstation ~(user-manufacturing)]$

Use the openstack quota show command to list the quotas for the east project.

[student@workstation ~(user-manufacturing)]$ openstack quota show \
> -c cores -c ram -c instances east
+-----------+-------+
| Field     | Value |
+-----------+-------+
| cores     | 20    |
| instances | 10    |
| ram       | 51200 |
+-----------+-------+

Modify the quotas for the east project to set the cores to 10, and the memory to 40000 MiB. Use the openstack quota set command with the options --cores and --ram.
```
[student@workstation ~(user-manufacturing)]$ openstack quota set \
> --cores 10 --ram 40000 east
```

Use the openstack quota show command to list the quotas for the west project:

[student@workstation ~(user-manufacturing)]$ openstack quota show \
> -c cores -c ram -c instances west
+-----------+-------+
| Field     | Value |
+-----------+-------+
| cores     | 20    |
| instances | 10    |
| ram       | 51200 |
+-----------+-------+

Modify the quotas for the west project to set the cores to 16 and the instances to 10. Use the openstack quota set command with the --cores and --instances options.
```
[student@workstation ~(user-manufacturing)]$ openstack quota set \
> --cores 16 --instances 10 west
```

As user user, create the user2 user in the Dashboard, setting the password to redhat and the primary project to west. Give user2 the admin role in the west project.
Note
Use the Dashboard to perform the following steps.
On workstation, open Firefox and browse to http://dashboard.overcloud.example.com. Log in to Dashboard using MyCorp as the domain, user as the user name, and redhat as the password.
Navigate to Identity → Users and then click Create User.
Enter user2 in the User Name field, and redhat in the Password and Confirm Password fields. Select west from the Primary Project list. Set Role to admin, and leave the Enabled check box selected.
Click Create User.
As user2, modify the project quotas for the west project to only allow 5 instances.
Log out of the Dashboard, and then log in as user2, using MyCorp as the domain name, and with a password of redhat.
Navigate to Identity → Projects. Select Modify Quotas from the list under the Actions column for the west project.
Select the Compute category, then enter 5 for Instances.
Click Save.

Evaluation

Grade your work by running the lab command from your workstation machine. Correct any reported failures and rerun the script until successful.

[student@workstation ~]$ lab project-review grade

Finish

On the workstation machine, use the lab command to complete this exercise. This is important to ensure that resources from previous exercises do not impact upcoming exercises.

[student@workstation ~]$ lab project-review finish

This concludes the lab.

Discuss Red Hat OpenStack Administration I: Core Operations for Domain Operators

Go to community

Red Hat OpenStack Administration I: Core Operations for Domain Operators (CL110)

Haley_Ruccio

1 sie 2023

Learn to operate a Red Hat® OpenStack Platform private cloud and manage domain resources to secure and deploy modern, scalable cloud applications, networks and storageRed Hat OpenStack Administration I: Core Operations for Domain Operators (CL110) teaches you how to operate and manage a production Red Hat OpenStack Platform (RHOSP) single-site overcloud. You will learn how to create secure project environments in which to provision resources and manage security privileges that cloud users need to deploy scalable cloud applications. You will learn about OpenShift integration with load balancers, identity management, monitoring, proxies, and storage. You will also develop more troubleshooting and Day 2 operations skills in this course.This course is based on Red Hat OpenStack Platform 16.1.Course content summaryStudents in the Red Hat OpenStack Administration I: Core Operations for Domain Operators (CL110) course will focus on performing both routine and specialized tasks that are necessary to manage a production OpenStack overcloud domain. Students will manage OpenStack using both web-based and command-line interfaces. Essential skills covered in the course include the following:Launch instances to satisfy various use case examples.Manage domains, projects, users, roles, and quota in a multitenant environment.Manage networks, subnets, routers, and floating IP addresses.Manage instance security with group rules and access keys.Create and manage block, object and shared storage within OpenStack.Perform instance launch customization with cloud-init.Deploy scalable applications using stack templates.Audience for this courseThis course is designed for cloud users who deploy application instances and stacks, domain operators who manage resources and security for cloud users, and any other cloud personnel interested in, or responsible for, maintaining applications on private or hybrid OpenStack clouds. Any cloud persona, or personnel with roles that include performing technology evaluation, should attend this course to learn RHOSP operation and application deployment methods.Prerequisites for this courseBecome a Red Hat Certified System Administrator (RHCSA) or demonstrate equivalent experienceIf you are not a RHCSA, you can take a skill assessment to gauge your level of knowledge.

Welcome to the Red Hat OpenStack Administration I (CL110) group in the Red Hat Learning Community!

Syed

31 lip 2023

We are excited to launch a space dedicated to the Red Hat Training course CL110! To gain the most value from this group - click the "Join Group" button in the upper right hand corner of the group home page.We encourage group members to collaborate in this group to discuss topics, ask questions, share best practices and tips, provide course feedback, and share their accomplishments as it relates to CL110.Read more about Red Hat OpenStack Administration I: Core Operations for Domain Operators here.

Revision: cl110-16.1-4c76154

Red Hat OpenStack Administration I: Core Operations for Domain Operators

Lab: Managing Application Projects in a Multitenant Cloud

Note