Ask Your Question

how can I create multiple domains?

asked 2017-05-10 17:03:09 -0500

mkhan gravatar image

my current environment is Mitaka, Newton, and Ocata with API-V3. How can I enable multiple domain support and how would I create through horizon and CLI.

Thanks, Mohammed Khan

edit retag flag offensive close merge delete

2 answers

Sort by ยป oldest newest most voted

answered 2017-05-10 18:18:31 -0500

Blog for enabling domain support in Horizon in Mitaka. Should also work in Ocata.

To create a domain using the CLI: openstack domain create. In the GUI, you should find this in the Admin->Identity section. See also the blog above.

edit flag offensive delete link more


Short note bc I dealed with this just yesterday: the domain tab is not visible per default, first you have to assign a domain admin, so basically execute

openstack role add --domain Default --user <USER> <DOMAIN>

to make the tab visible in the sidebar.

eblock gravatar imageeblock ( 2017-05-11 04:08:14 -0500 )edit

import os from django.utils.translation import ugettext_lazy as _ from horizon.utils import secret_key from openstack_dashboard import exceptions from openstack_dashboard.settings import HORIZON_CONFIG DEBUG = False TEMPLATE_DEBUG = DEBUG WEBROOT = '/dashboard/' LOGIN_URL = '/dashboard/auth/login/'

mkhan gravatar imagemkhan ( 2017-05-11 10:58:59 -0500 )edit

{ "admin_required": "role:admin", "cloud_admin": "role:admin and (is_admin_project:True or domain_id:admin_domain_id)", "service_role": "role:service", "service_or_admin": "rule:admin_required or rule:service_role", "owner" : "user_id:%(user_id)s or user_id:%(target.token.user_id

mkhan gravatar imagemkhan ( 2017-05-11 11:00:09 -0500 )edit

These two files exactly the same as you recommended above and also identity is APIv3. I cannot see any tab on dashboard of domain also, I try to create a domain through CLI and its not authorizing me to create any domain or add role. On dashboard under identity get unable retrieve project list.

mkhan gravatar imagemkhan ( 2017-05-11 11:08:12 -0500 )edit

answered 2017-05-11 12:41:59 -0500

mkhan gravatar image

Thanks for Your reply!!!!

I found the way and domain tab appear on the dashboard. The way I did you recommended using CLI. I was using v3sample_poilcy.JSON file under /etc/keyston/ but it was giving me error could retrieve project list or user and neither I could create a domain. What exactly I did, I use the default policy.json file and dashboard start showing me project, user, and domain that I created by CLI. This configuration I did on Ocata and haven't done the same Testing on Mitaka yet.

Now, my question is how would I log in as domain I created and add users, members, and project into it. It would be helpful if you guide me through it.

Thanks, Mohammed Khan

edit flag offensive delete link more

Get to know Ask OpenStack

Resources for moderators

Question Tools

1 follower


Asked: 2017-05-10 17:03:09 -0500

Seen: 1,069 times

Last updated: May 11 '17