Applies to HPE Helion OpenStack 8

3 Cloud Admin Actions with the Dashboard

The Horizon dashboard provides cloud admins a web GUI to perform domain admin tasks such as user and project administration and managing project quotas.

Cloud admins can use the dashboard GUI to perform domain admin tasks such as user and project administration and managing project quotas.

3.1 Cloud Admin

As a Cloud Admin, you can create new domains, projects, users or remove them. You can also give admin privileges to users you create.

3.2 Accessing the dashboard

Prior to accessing the dashboard you will need to retrieve your admin user password. For more details, see Book “Operations Guide”, Chapter 4 “Managing Identity”, Section 4.6 “Retrieving the Admin Password”.

If your administrator set a hostname value for external_name in your network_groups.yml file during the configuration process for your cloud then Horizon will be accessed over port 443 (https) on that hostname.

If your administrator did not set a hostname value then in order to determine which IP address to use to access Horizon you can use this command from your Cloud Lifecycle Manager node:

grep HZN-WEB /etc/hosts

The output of that command will show you the virtual IP address for Horizon that you should use.

The default username for the Administrator user is admin. You will use that along with the password you retrieved earlier and your domain name when logging in.

3.3 Cloud Admin Activities

You must log into the Dashboard via the default domain using a cloud admin username and password to create, modify or remove domains, projects or users. Look at the Project picker at the top of the Dashboard UI and ensure that the Default domain and the admin project BOTH have checks beside them. The demo project is selected by default, and this will cause issues if not changed.

3.4 Create a New Domain

You can create new domains as a Cloud Admin.

  1. Select Identity and Domains in the sidebar

  2. Click Create Domain from the list above the domains table

  3. Enter a domain name and description.

  4. The Enabled checkbox is checked by default

  5. Click the Create Domain button

3.5 Set Domain context to the newly created Domain

After you have created a new domain as the Cloud Admin, set the context.

  1. Select Identity and Domains in the sidebar.

  2. Click Set Domain Context button on the newly created domain.

3.6 Create a New Project

You can create new projects.

  1. Select Identity and Projects in the sidebar.

  2. Click Create Project from the list above the projects table

  3. The Domain ID and Name are immutably set to the new domain.

  4. Enter a project name and description

  5. The Enabled checkbox is checked by default.

  6. Click Create Project button.

  7. The project created will be displayed.

3.7 Create a New User

Warning
Warning

Do not create users in the default domain with admin privileges unless you want them to act as Cloud Admin users.

  1. Select Identity and Users in the sidebar

  2. Click Create User from the list above the users table

  3. Domain ID and Name are immutably set to the new domain.

  4. Enter a user name, description, email address, password.

  5. The new project is preselected.

  6. The role _Member_ is preselected.

  7. The Enabled checkbox is checked by default.

  8. Click Create User button.

  9. The user created will be displayed.

3.8 Remove a user from a project

  1. Select Identity and Projects in the sidebar

  2. Click Manage Members in the actions column for the project.

  3. In the right column, click the minus ("") beside the user to remove them from the project

  4. Click Save to save the change

3.9 Assign Admin role to User within the new Domain

You can assign admin privileges to a user within a domain.

Warning
Warning

Assigning admin privileges to a user in the default domain gives them Cloud Admin privileges.

  1. Select Identity and Domains in the sidebar

  2. Click Manage Members in the actions column for the domain

  3. If necessary, in the left column, click the plus ("+") beside the user that should be the domain admin.

  4. In the right column, click the dropdown beside the domain admin user and ensure that ONLY the admin role is selected by clicking it. Unselect any other roles selected by clicking them.

  5. Click Save to save the change

3.10 Setting and managing quotas

Infrastructure resource quotas are also defined within the OpenStack cloud. Quotas are defined per service but can be assigned via the Horizon user interface in the Projects section; thus, this function is often associated with the Keystone API.

Quotas are assigned per each project.

Quotas can be managed using the CLI. Instructions can be found on OpenStack web site in Managing Quotas

In Horizon, selecting Admin › Systems › Defaults from the menu provides a list of system quotas that can viewed and edited.

3.11 Sign out of the Dashboard

Sign out of the Dashboard by clicking Sign Out.

Print this page