3 Cloud Admin Actions with the Dashboard #
The Horizon dashboard provides cloud admins a web GUI to perform domain admin tasks such as user and project administration and managing project quotas.
Cloud admins can use the dashboard GUI to perform domain admin tasks such as user and project administration and managing project quotas.
3.1 Cloud Admin #
As a Cloud Admin, you can create new domains, projects, users or remove them. You can also give admin privileges to users you create.
3.2 Accessing the dashboard #
Prior to accessing the dashboard you will need to retrieve your admin user password. For more details, see Book “Operations Guide”, Chapter 4 “Managing Identity”, Section 4.6 “Retrieving the Admin Password”.
If your administrator set a hostname value for
external_name in your
network_groups.yml file during the configuration process
for your cloud then Horizon will be accessed over port 443 (https) on that
hostname.
If your administrator did not set a hostname value then in order to determine which IP address to use to access Horizon you can use this command from your Cloud Lifecycle Manager node:
grep HZN-WEB /etc/hosts
The output of that command will show you the virtual IP address for Horizon that you should use.
The default username for the Administrator user is admin.
You will use that along with the password you retrieved earlier and your
domain name when logging in.
3.3 Cloud Admin Activities #
You must log into the Dashboard via the default domain using a cloud admin username and password to create, modify or remove domains, projects or users. Look at the Project picker at the top of the Dashboard UI and ensure that the Default domain and the admin project BOTH have checks beside them. The demo project is selected by default, and this will cause issues if not changed.
3.4 Create a New Domain #
You can create new domains as a Cloud Admin.
Select Identity and Domains in the sidebar
Click Create Domain from the list above the domains table
Enter a domain name and description.
The Enabled checkbox is checked by default
Click the Create Domain button
3.5 Set Domain context to the newly created Domain #
After you have created a new domain as the Cloud Admin, set the context.
Select Identity and Domains in the sidebar.
Click Set Domain Context button on the newly created domain.
3.6 Create a New Project #
You can create new projects.
Select Identity and Projects in the sidebar.
Click Create Project from the list above the projects table
The
Domain IDandNameare immutably set to the new domain.Enter a project name and description
The Enabled checkbox is checked by default.
Click button.
The project created will be displayed.
3.7 Create a New User #
Do not create users in the default domain with admin privileges unless you want them to act as Cloud Admin users.
Select Identity and Users in the sidebar
Click Create User from the list above the users table
Domain IDandNameare immutably set to the new domain.Enter a user name, description, email address, password.
The new project is preselected.
The role
_Member_is preselected.The
Enabledcheckbox is checked by default.Click button.
The user created will be displayed.
3.8 Remove a user from a project #
Select Identity and Projects in the sidebar
Click Manage Members in the actions column for the project.
In the right column, click the minus ("") beside the user to remove them from the project
Click Save to save the change
3.9 Assign Admin role to User within the new Domain #
You can assign admin privileges to a user within a domain.
Assigning admin privileges to a user in the default domain gives them Cloud Admin privileges.
Select Identity and Domains in the sidebar
Click Manage Members in the actions column for the domain
If necessary, in the left column, click the plus ("+") beside the user that should be the domain admin.
In the right column, click the dropdown beside the domain admin user and ensure that ONLY the admin role is selected by clicking it. Unselect any other roles selected by clicking them.
Click Save to save the change
3.10 Setting and managing quotas #
Infrastructure resource quotas are also defined within the OpenStack cloud. Quotas are defined per service but can be assigned via the Horizon user interface in the Projects section; thus, this function is often associated with the Keystone API.
Quotas are assigned per each project.
Quotas can be managed using the CLI. Instructions can be found on OpenStack web site in Managing Quotas
In Horizon, selecting › › from the menu provides a list of system quotas that can viewed and edited.
3.11 Sign out of the Dashboard #
Sign out of the Dashboard by clicking .