Configuring multitenancy

To configure multitenancy for the compute cluster, you need to create domains and projects, assign users to them, and define project quotas.

Limitations

  • You can set project quotas only after deploying the compute cluster.

Prerequisites

  • A clear understanding of the concept Multitenancy.
  • As quotas can exceed the existing virtual resources and virtual resources are not reserved for each project, the compute cluster must have enough virtual resources for all projects in all domains.

To create a domain

  1. On the Settings > Projects and users screen, click Create domain.
  2. In the Create domain window, specify the domain name and, optionally, description.

  3. Click Create.

To create a project

  1. On the Settings > Projects and users screen, click a domain within which the project will be created.
  2. On the Projects tab, click Create project.
  3. In the Create project window, specify the project name and, optionally, description. The project name must be unique within a domain.
  4. [Optional] Clear the Enabled check box to disable the created project.
  5. Define quotas for virtual resources that will be available inside the project. To specify a certain value for a resource, clear the Unlimited check box next to it first.
  6. Click Create.

    The default storage policy must be shared with projects that will use the Kubernetes-as-a-service feature.

To create a self-service user

  1. On the Settings > Projects and users screen, click a domain within which the user will be created.
  2. Go to the Domain users tab, and then click Create user.
  3. In the Create user window, specify the user name, password, and, if required, a user email address and description. The user name must be unique within a domain.
  4. Select the user role:
  5. Click Create.