Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-06 Thread Adam Young
"OpenStack Development Mailing List (not for usage questions)" Sent: Wednesday, February 5, 2014 8:43:08 PM Subject: Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion On Feb 5, 2014, at 3:38 AM, Vishvananda Ishaya wrote: On Feb 5, 2014, at 12:

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-06 Thread Florent Flament
rules and quotas" for thoughts about centralized RBAC rules and Quotas. Florent Flament - Original Message - From: "Chris Behrens" To: "OpenStack Development Mailing List (not for usage questions)" Sent: Wednesday, February 5, 2014 8:43:08 PM Subject: Re: [

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Chris Behrens
On Feb 5, 2014, at 3:38 AM, Vishvananda Ishaya wrote: > > On Feb 5, 2014, at 12:27 AM, Chris Behrens wrote: > >> 1) domain ‘a’ cannot see instances (or resources in general) in domain ‘b’. >> It doesn’t matter if domain ‘a’ and domain ‘b’ share the same tenant ID. If >> you act with the API

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Chris Behrens
ervice Providers should want if they intend to Resell/Co-brand, etc. - Chris > > Thanks, > Arvind > > -Original Message- > From: Chris Behrens [mailto:cbehr...@codestud.com] > Sent: Wednesday, February 05, 2014 1:27 AM > To: OpenStack Development Mailing List (

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Tiwari, Arvind
sale model. Thoughts? Thanks, Arvind -Original Message- From: Chris Behrens [mailto:cbehr...@codestud.com] Sent: Wednesday, February 05, 2014 1:27 AM To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Mult

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Andrew Laski
: "Vishvananda Ishaya" To: "OpenStack Development Mailing List (not for usage questions)" Sent: Monday, February 3, 2014 10:58:28 PM Subject: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion Hello Again! At the meeting last week we discusse

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Vishvananda Ishaya
On Feb 5, 2014, at 12:27 AM, Chris Behrens wrote: > > Hi Vish, > > I’m jumping in slightly late on this, but I also have an interest in this. > I’m going to preface this by saying that I have not read this whole thread > yet, so I apologize if I repeat things, say anything that is addressed

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Vishvananda Ishaya
gt; service whether an action is authorized for a given token? So I threw out the idea the other day that quota enforcement should perhaps be done by gantt. Quotas seem to be a scheduling concern more than anything else. > > Florent Flament > > > > - Original Message

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Martins, Tiago
cloudwatt.com] Sent: quarta-feira, 5 de fevereiro de 2014 08:38 To: OpenStack Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion Hi Vish, You're approach looks very interesting. I especially like the idea

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Florent Flament
uestions)" Sent: Monday, February 3, 2014 10:58:28 PM Subject: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion Hello Again! At the meeting last week we discussed some options around getting true multitenancy in nova. The use case that we are trying to

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-05 Thread Chris Behrens
Hi Vish, I’m jumping in slightly late on this, but I also have an interest in this. I’m going to preface this by saying that I have not read this whole thread yet, so I apologize if I repeat things, say anything that is addressed by previous posts, or doesn’t jive with what you’re looking for.

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-04 Thread Gabriel Hurley
> Yes this is one approach if keystone really wants to extend domains to work > this way, but I think this is more complex than just using nested projects. > Having domains contain domains containing projects is less intuitive than > projects all the way down. It's worth mentioning that at the mee

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-04 Thread Vishvananda Ishaya
(Nova, Swift ) may have define new roles. > > > Let me know if I am not making sense here or have any questions. > > > Arvind > > -----Original Message- > From: Vishvananda Ishaya [mailto:vishvana...@gmail.com] > Sent: Monday, February 03, 2014 2:58 PM >

Re: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-04 Thread Tiwari, Arvind
Arvind -Original Message- From: Vishvananda Ishaya [mailto:vishvana...@gmail.com] Sent: Monday, February 03, 2014 2:58 PM To: OpenStack Development Mailing List (not for usage questions) Subject: [openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion Hello Again

[openstack-dev] [keystone][nova] Re: Hierarchicical Multitenancy Discussion

2014-02-03 Thread Vishvananda Ishaya
Hello Again! At the meeting last week we discussed some options around getting true multitenancy in nova. The use case that we are trying to support can be described as follows: "Martha, the owner of ProductionIT provides it services to multiple Enterprise clients. She would like to offer clou