Chapter 3. Introduction to the Identity Service (keystone)
Chapter 3. Introduction to the Identity Service (keystone) As a cloud administrator, you can manage projects, users, and roles. Projects within the Red Hat OpenStack Services on OpenShift (RHOSO) data plane are organizational units containing a collection of resources. You can assign OpenStack users to roles within those projects. Roles define the actions that those users can perform on the resources within a given project. Users can be assigned roles in multiple projects. Each RHOSO data plane deployment must include at least one user assigned to a role within a project. As a cloud administrator, a user can perform the following actions within OpenStack: Add, update, and delete projects and users. Assign users to one or more roles, and change or remove these assignments. Manage projects and users independently from each other. You can also configure user authentication with the Identity service (keystone)to control access to services and endpoints. 3.1. Authenticate with clouds.yaml Prerequisites The administrator has created a project for you and they have provided you with a clouds.yaml file for you to access the cloud. You have installed the python-openstackclient package. Note To execute openstack client commands on the cloud you must specify the name of the cloud detailed in your clouds.yaml file. You can specify the name of the cloud in one of two ways: Use the --os-cloud option with each command: Use this option if you access more than one cloud. Create an environment variable for the cloud name in your bashrc file:
openstack flavor list --os-cloud <cloud_name> `export OS_CLOUD=<cloud_name>`