OpenStack Project Management

Intro

In the OpenStack tab, you have the option to create and manage OpenStack projects, as well as view your utilized OpenStack resources. Projects are understood to be region-spanning. This means you can create VMs in both regions and run them under the same project.

Note

Please note that projects are tied to OpenStack and therefore have their own permission management.

Prerequisites for Use

Appropriate permission (Admin)
Sufficient Quota

Create OpenStack Project

To create an OpenStack Project, please proceed as follows:

To do this, navigate to OpenStack on the left and then to Project Management.
Now, please click the Create project button.
Now enter a name and description and select a suitable Quota Profile
Complete your entry by clicking Create.

Note

If your quota is insufficient for your new project, you can adjust your selected Quota Profile, or request a higher Quota.

Project creation may take some time, as many components need to interact. Once your project has been created, you will find it in the list of projects.

OpenStack User Permission Management

To use the project, you must grant your users the necessary permissions.
You can do this as follows:

To do this, navigate to OpenStack on the left and then to Project Management.
Select the project to which you want to add the users (1)
Click the Assign Roles to User button

The window for assigning roles will now open.

Select the roles you want to assign here.(1)
Select the users who should receive the selected roles here.(2)
To confirm your selection, click Assign.

Please note that this process may take a few seconds. Once all necessary entries have been made, you will find the user in the list of users.

OpenStack Project Roles Legend

Role	Description
`_member_`	Default role that grants access to a project
`member`	Duplicate of `_member_` still required for some API calls
`heat_stack_owner`	Role is allowed to create/start Heat Stacks
`reader`	May read secrets in Barbican
`creator`	May create secrets in Barbican, e.g., for server-side encryption
`load_balancer_member`	May create load balancers