Red Hat Summit이 콘텐츠는 선택한 언어로 제공되지 않습니다.
Chapter 11. Multitenancy
Red Hat 3scale allows multiple independent instances of 3scale tenants to exist on a single On-Premises deployment. A master administrator monitors and manages these tenants through a special master admin portal and API endpoints.
Tenants operate independently from each other, and cannot share information between themselves. They are administered by tenant administrators, who can perform the standard administrative actions under their tenancy. For details on tenant administrator operations, refer to the Accounts guide.
11.1. Master admin portal
The master administrator has access to the master admin portal. Similar to the standard admin portal, the master admin portal contains information about all tenants in a deployment and allows for administration of tenants and users through a unique tenant page.
11.2. Accessing the master admin portal
Access the master admin portal using the master admin portal credentials and URL defined and output during the on-premises installation process.
The master admin portal URL consists of the MASTER_NAME prepended to the -admin string subdomain:
<MASTER_NAME>-admin.<OCP_DOMAIN>
<MASTER_NAME>-admin.<OCP_DOMAIN>The master admin portal can be identified by the Master flag in the upper left corner.
11.3. Adding a tenant through the master admin portal
- Log in to your master admin account
Select Tenants
Create Enter the required information:
- Username
- Password
Organization/Group name
- Select the Create button to create the user
Once you select Create, Red Hat 3scale creates a tenant subdomain for your tenant based on the Organization/Group name.
11.4. Managing tenant accounts through the master admin portal
- Log in to the master admin portal
Navigate to the Tenants page
- Select the group or organization you wish to manage
From the Tenants page, you can perform administrative actions, such as impersonating a tenant admin or suspending a tenant account. You can also manage the following tenant account attributes:
- applications
- users
- invitations
- group memberships
- organization/group name
11.5. Managing tenant accounts through API calls
You can manage tenant accounts though master admin API calls. For information on master admin API calls, Refer to the Master API section of the 3scale API Docs, available in the upper left corner of the master admin portal.
11.6. Understanding multitenancy subdomains
As a result of multiple tenants existing under the same OpenShift cluster domain, individual tenant names prepend the OpenShift cluster domain name as subdomains. For example, the route for a tenant named user on a cluster with a domain of example.com appears as:
user.example.com
user.example.comA standard multitenant deployment will include:
- A master admin user
A master admin portal route, defined by the
MASTER_NAMEparameter:<MASTER_NAME>-admin.<OCP_DOMAIN>
<MASTER_NAME>-admin.<OCP_DOMAIN>Copy to Clipboard Copied! Toggle word wrap Toggle overflow - A tenant admin user
A tenant admin portal route, defined by the
TENANT_NAMEparameter:<TENANT_NAME>-admin.<OCP_DOMAIN>
<TENANT_NAME>-admin.<OCP_DOMAIN>Copy to Clipboard Copied! Toggle word wrap Toggle overflow A tenant AMP route:
<TENANT_NAME>.<OCP_DOMAIN>
<TENANT_NAME>.<OCP_DOMAIN>Copy to Clipboard Copied! Toggle word wrap Toggle overflow Tenant routes for the production and staging built-in APIcast gateway:
<TENANT_NAME>-<!!! Not sure>-apicast-staging.<OCP_DOMAIN> <TENANT_NAME>-<!!! Not sure>-apicast-production.<OCP_DOMAIN>
<TENANT_NAME>-<!!! Not sure>-apicast-staging.<OCP_DOMAIN> <TENANT_NAME>-<!!! Not sure>-apicast-production.<OCP_DOMAIN>Copy to Clipboard Copied! Toggle word wrap Toggle overflow This example illustrates the output users and routes of a standard multitenant deployment of 3scale:
This example illustrates the output users and routes of a standard multitenant deployment of 3scale:Copy to Clipboard Copied! Toggle word wrap Toggle overflow ---- --> Deploying template "3scale-project/3scale-api-management" for "amp.yml" to project project
---- --> Deploying template "3scale-project/3scale-api-management" for "amp.yml" to project projectCopy to Clipboard Copied! Toggle word wrap Toggle overflow 3scale API Management --------- 3scale API Management main system
3scale API Management --------- 3scale API Management main systemCopy to Clipboard Copied! Toggle word wrap Toggle overflow Copy to Clipboard Copied! Toggle word wrap Toggle overflow
Additional tenants added by the master admin will be be assigned a subdomain based on their names.
'%20d='M201.5%20305.5c-13.8%200-24.9-11.1-24.9-24.6%200-13.8%2011.1-24.9%2024.9-24.9%2013.6%200%2024.6%2011.1%2024.6%2024.9%200%2013.6-11.1%2024.6-24.6%2024.6zM504%20256c0%20137-111%20248-248%20248S8%20393%208%20256%20119%208%20256%208s248%20111%20248%20248zm-132.3-41.2c-9.4%200-17.7%203.9-23.8%2010-22.4-15.5-52.6-25.5-86.1-26.6l17.4-78.3%2055.4%2012.5c0%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.3%2024.9-24.9s-11.1-24.9-24.9-24.9c-9.7%200-18%205.8-22.1%2013.8l-61.2-13.6c-3-.8-6.1%201.4-6.9%204.4l-19.1%2086.4c-33.2%201.4-63.1%2011.3-85.5%2026.8-6.1-6.4-14.7-10.2-24.1-10.2-34.9%200-46.3%2046.9-14.4%2062.8-1.1%205-1.7%2010.2-1.7%2015.5%200%2052.6%2059.2%2095.2%20132%2095.2%2073.1%200%20132.3-42.6%20132.3-95.2%200-5.3-.6-10.8-1.9-15.8%2031.3-16%2019.8-62.5-14.9-62.5zM302.8%20331c-18.2%2018.2-76.1%2017.9-93.6%200-2.2-2.2-6.1-2.2-8.3%200-2.5%202.5-2.5%206.4%200%208.6%2022.8%2022.8%2087.3%2022.8%20110.2%200%202.5-2.2%202.5-6.1%200-8.6-2.2-2.2-6.1-2.2-8.3%200zm7.7-75c-13.6%200-24.6%2011.1-24.6%2024.9%200%2013.6%2011.1%2024.6%2024.6%2024.6%2013.8%200%2024.9-11.1%2024.9-24.6%200-13.8-11-24.9-24.9-24.9z'/%3e%3c/svg%3e){kind=small}