Ce contenu n'est pas disponible dans la langue sélectionnée.
Chapter 9. Managing domains
Manage domains in Red Hat OpenStack Services on OpenShift (RHOSO) to isolate tenant resources. Using domains creates separate boundaries for users and projects. Identity service (keystone) domains are additional namespaces that you can create.
The Identity service includes a built-in domain called Default. It is suggested you reserve this domain only for service accounts, and create a separate domain for user accounts.
9.1. Viewing a list of domains Copier lienLien copié sur presse-papiers!
View a list of domains in Red Hat OpenStack Services on OpenShift (RHOSO) to audit tenant isolation. Listing domains enables you to verify that the correct administrative boundaries exist for your users and projects.
Procedure
View a list of the domains:
$ openstack domain listFor example:
+----------------------------------+------------------+---------+--------------------+ | ID | Name | Enabled | Description | +----------------------------------+------------------+---------+--------------------+ | 3abefa6f32c14db9a9703bf5ce6863e1 | TestDomain | True | | | 69436408fdcb44ab9e111691f8e9216d | corp | True | | | a4f61a8feb8d4253b260054c6aa41adb | federated_domain | True | | | default | Default | True | The default domain | +----------------------------------+------------------+---------+--------------------+
9.2. Creating a new domain Copier lienLien copié sur presse-papiers!
Create a new domain in Red Hat OpenStack Services on OpenShift (RHOSO) to define a separate administrative boundary. This ensures that you can manage users and projects for different organizations in isolation from the default domain.
Procedure
Create a new domain:
$ openstack domain create TestDomainFor example:
+-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | | | enabled | True | | id | 3abefa6f32c14db9a9703bf5ce6863e1 | | name | TestDomain | +-------------+----------------------------------+
9.3. Viewing the details of a domain Copier lienLien copié sur presse-papiers!
View domain details in Red Hat OpenStack Services on OpenShift (RHOSO) to audit specific attributes. Verifying settings like the domain ID ensures that the administrative boundary correctly isolates your tenant resources.
Procedure
View the details of a domain:
$ openstack domain show TestDomainFor example:
+-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | | | enabled | True | | id | 3abefa6f32c14db9a9703bf5ce6863e1 | | name | TestDomain | +-------------+----------------------------------+
9.4. Disabling a domain Copier lienLien copié sur presse-papiers!
Disable a domain in Red Hat OpenStack Services on OpenShift (RHOSO) to suspend user access immediately. This action prevents authentication and API usage, allowing you to secure the environment during security audits or when decommissioning a tenant.
You can disable and enable domains according to your requirements.
Procedure
Disable a domain using the
--disableoption:$ openstack domain set TestDomain --disableConfirm that the domain has been disabled:
$ openstack domain show TestDomainFor example:
+-------------+----------------------------------+ | Field | Value | +-------------+----------------------------------+ | description | | | enabled | False | | id | 3abefa6f32c14db9a9703bf5ce6863e1 | | name | TestDomain | +-------------+----------------------------------+Use the
--enableoption to re-enable the domain, if required:$ openstack domain set TestDomain --enable