Ce contenu n'est pas disponible dans la langue sélectionnée.

Chapter 9. Managing domains


Manage domains in Red Hat OpenStack Services on OpenShift (RHOSO) to isolate tenant resources. Using domains creates separate boundaries for users and projects. Identity service (keystone) domains are additional namespaces that you can create.

Note

The Identity service includes a built-in domain called Default. It is suggested you reserve this domain only for service accounts, and create a separate domain for user accounts.

9.1. Viewing a list of domains

View a list of domains in Red Hat OpenStack Services on OpenShift (RHOSO) to audit tenant isolation. Listing domains enables you to verify that the correct administrative boundaries exist for your users and projects.

Procedure

  • View a list of the domains:

    $ openstack domain list

    For example:

    +----------------------------------+------------------+---------+--------------------+
    | ID                               | Name             | Enabled | Description        |
    +----------------------------------+------------------+---------+--------------------+
    | 3abefa6f32c14db9a9703bf5ce6863e1 | TestDomain       | True    |                    |
    | 69436408fdcb44ab9e111691f8e9216d | corp             | True    |                    |
    | a4f61a8feb8d4253b260054c6aa41adb | federated_domain | True    |                    |
    | default                          | Default          | True    | The default domain |
    +----------------------------------+------------------+---------+--------------------+

9.2. Creating a new domain

Create a new domain in Red Hat OpenStack Services on OpenShift (RHOSO) to define a separate administrative boundary. This ensures that you can manage users and projects for different organizations in isolation from the default domain.

Procedure

  • Create a new domain:

    $ openstack domain create TestDomain

    For example:

    +-------------+----------------------------------+
    | Field       | Value                            |
    +-------------+----------------------------------+
    | description |                                  |
    | enabled     | True                             |
    | id          | 3abefa6f32c14db9a9703bf5ce6863e1 |
    | name        | TestDomain                       |
    +-------------+----------------------------------+

9.3. Viewing the details of a domain

View domain details in Red Hat OpenStack Services on OpenShift (RHOSO) to audit specific attributes. Verifying settings like the domain ID ensures that the administrative boundary correctly isolates your tenant resources.

Procedure

  • View the details of a domain:

    $ openstack domain show TestDomain

    For example:

    +-------------+----------------------------------+
    | Field       | Value                            |
    +-------------+----------------------------------+
    | description |                                  |
    | enabled     | True                             |
    | id          | 3abefa6f32c14db9a9703bf5ce6863e1 |
    | name        | TestDomain                       |
    +-------------+----------------------------------+

9.4. Disabling a domain

Disable a domain in Red Hat OpenStack Services on OpenShift (RHOSO) to suspend user access immediately. This action prevents authentication and API usage, allowing you to secure the environment during security audits or when decommissioning a tenant.

Note

You can disable and enable domains according to your requirements.

Procedure

  1. Disable a domain using the --disable option:

    $ openstack domain set TestDomain --disable
  2. Confirm that the domain has been disabled:

    $ openstack domain show TestDomain

    For example:

    +-------------+----------------------------------+
    | Field       | Value                            |
    +-------------+----------------------------------+
    | description |                                  |
    | enabled     | False                            |
    | id          | 3abefa6f32c14db9a9703bf5ce6863e1 |
    | name        | TestDomain                       |
    +-------------+----------------------------------+
  3. Use the --enable option to re-enable the domain, if required:

    $ openstack domain set TestDomain --enable
Red Hat logoGithubredditYoutubeTwitter

Apprendre

Essayez, achetez et vendez

Communautés

À propos de la documentation Red Hat

Nous aidons les utilisateurs de Red Hat à innover et à atteindre leurs objectifs grâce à nos produits et services avec un contenu auquel ils peuvent faire confiance. Découvrez nos récentes mises à jour.

Rendre l’open source plus inclusif

Red Hat s'engage à remplacer le langage problématique dans notre code, notre documentation et nos propriétés Web. Pour plus de détails, consultez le Blog Red Hat.

À propos de Red Hat

Nous proposons des solutions renforcées qui facilitent le travail des entreprises sur plusieurs plates-formes et environnements, du centre de données central à la périphérie du réseau.

Theme

© 2026 Red Hat
Retour au début