The Horizon dashboard provides cloud admins a web GUI to perform domain admin tasks such as user and project administration and managing project quotas.
Cloud admins can use the dashboard GUI to perform domain admin tasks such as user and project administration and managing project quotas.
As a Cloud Admin, you can create new domains, projects, users or remove them. You can also give admin privileges to users you create.
Prior to accessing the dashboard you will need to retrieve your admin user password. For more details, see Book “Operations Guide”, Chapter 4 “Managing Identity”, Section 4.6 “Retrieving the Admin Password”.
If your administrator set a hostname value for
external_name
in your
network_groups.yml
file during the configuration process
for your cloud then Horizon will be accessed over port 443 (https) on that
hostname.
If your administrator did not set a hostname value then in order to determine which IP address to use to access Horizon you can use this command from your Cloud Lifecycle Manager node:
grep HZN-WEB /etc/hosts
The output of that command will show you the virtual IP address for Horizon that you should use.
The default username for the Administrator user is admin
.
You will use that along with the password you retrieved earlier and your
domain name when logging in.
You must log into the Dashboard via the default domain using a cloud admin username and password to create, modify or remove domains, projects or users. Look at the Project picker at the top of the Dashboard UI and ensure that the Default domain and the admin project BOTH have checks beside them. The demo project is selected by default, and this will cause issues if not changed.
You can create new domains as a Cloud Admin.
Select Identity and Domains in the sidebar
Click Create Domain from the list above the domains table
Enter a domain name and description.
The Enabled checkbox is checked by default
Click the Create Domain button
After you have created a new domain as the Cloud Admin, set the context.
Select Identity and Domains in the sidebar.
Click Set Domain Context button on the newly created domain.
You can create new projects.
Select Identity and Projects in the sidebar.
Click Create Project from the list above the projects table
The Domain ID
and Name
are immutably
set to the new domain.
Enter a project name and description
The Enabled checkbox is checked by default.
Click
button.The project created will be displayed.
Do not create users in the default domain with admin privileges unless you want them to act as Cloud Admin users.
Select Identity and Users in the sidebar
Click Create User from the list above the users table
Domain ID
and Name
are immutably set
to the new domain.
Enter a user name, description, email address, password.
The new project is preselected.
The role _Member_
is preselected.
The Enabled
checkbox is checked by default.
Click
button.The user created will be displayed.
Select Identity and Projects in the sidebar
Click Manage Members in the actions column for the project.
In the right column, click the minus ("") beside the user to remove them from the project
Click Save to save the change
You can assign admin privileges to a user within a domain.
Assigning admin privileges to a user in the default domain gives them Cloud Admin privileges.
Select Identity and Domains in the sidebar
Click Manage Members in the actions column for the domain
If necessary, in the left column, click the plus ("+") beside the user that should be the domain admin.
In the right column, click the dropdown beside the domain admin user and ensure that ONLY the admin role is selected by clicking it. Unselect any other roles selected by clicking them.
Click Save to save the change
Infrastructure resource quotas are also defined within the OpenStack cloud. Quotas are defined per service but can be assigned via the Horizon user interface in the Projects section; thus, this function is often associated with the Keystone API.
Quotas are assigned per each project.
Quotas can be managed using the CLI. Instructions can be found on OpenStack web site in Managing Quotas
In Horizon, selecting
› › from the menu provides a list of system quotas that can viewed and edited.Sign out of the Dashboard by clicking
.