Hands-on Lab

Managing Domains
and Groups
Contents
Create the Domain 1

Create a Project 1

Create a Group 2

Create and Review Rolls 2

Review 3
Managing Domains and Groups Linux Academy + Cloud Assessments

As an administrator for OpenStack at All Things Games, we have been tasked to create a new
domain called sales with the description “Front-line Sales”. We are then to connect that domain
to a project we will name internet. Once we have created those, we will add a group to the
domain and project, name it agents, and provide it with a member role.

Create the Domain

Before we can create a new domain for All Things Games, we need to sign in as the root user:

[linuxacademy@linuxacademy ~] ssh root@IP

Enter yes and then enter the provided ssh password.

Once we’ve logged in as the root user, we need to source the admin credentials:

[root@IP ~] . admin-openrc

Now that we have our credentials set up, we can get started creating our OpenStack domain.
Remember, for this domain we are providing the description “Front-line Sales”:

[root@$IP ~(keystone_admin)]# openstack domain create

--description "Front-line Sales" sales

A table appears with the information over our newly created domain.

Let’s verify this by having OpenStack show the newly created domain:

[root@$IP ~(keystone_admin)]# openstack domain show sales

The same table as before appears.

Create a Project
Now we need to create the project internet that will work in our domain. Make sure that our
domain is named internet and connects with sales:

[root@$IP ~(keystone_admin)]# openstack project create --domain

sales internet

-1-
Managing Domains and Groups Linux Academy + Cloud Assessments

Again, use OpenStack to review that it is there:

[root@$IP ~(keystone_admin)]# openstack project show internet

The same information will appear.

Create a Group
The last thing we need to do is create our agents group:

[root@$IP ~(keystone_admin)]# openstack group create --domain

sales agents

We will review the agents when we review our rolls.

Create and Review Rolls

First, let’s review the available rolls to see what is already there.

[root@$IP ~(keystone_admin)]# openstack role list

One of the items in the Name section is member. This is what we will be adding to our group.
When we add it, note that we don’t need to specify the domain since these items only belong
to one domain:

[root@$IP ~(keystone_admin)]# openstack role add --project

internet --group agents _member_

To review the information, enter the following:

[root@$IP ~(keystone_admin)]# openstack role assignment list

--names --group agents

A table appears showing member as the role, agents@sales as the group, and internet@sales
as the project.

-2-
Managing Domains and Groups Linux Academy + Cloud Assessments

Review
Upon completion of this lab, you are now able to create a new domain with OpenStack, connect
a project in that domain, a group for that project, and finally connect members to your group.
Congratulations! Feel free to continue practicing in the lab space provided.

-3-