跳到主內容
版本:3.0

為 Kubernetes 建立專案

建立 Kubernetes 專用之租戶專案與使用者

透過SSH連線至管理控制台

CLI: app project_create $PROJ_NAME $MGMT_NET $PUB_NET

資訊

此操作將建立一個新使用者與新專案,同時建立透過 $PUB_NET 路由的 private-k8sprivate 網路,以及專案內的 default-k8sdefault 安全群組。

cc1> app project_create bigstack-k8s public public
creating app project: bigstack-k8s...
[WARNING]: provided hosts list is empty, only localhost is available. Note that the implicit localhost does not match 'all'

PLAY [openstack] **********************************************************************

TASK [Gathering Facts] ****************************************************************
ok: [localhost]

TASK [Gather information about management network] ************************************
ok: [localhost]

TASK [Gather information about management subnet] *************************************
ok: [localhost]

TASK [Show management subnet CIDR] ****************************************************
ok: [localhost] => {
"msg": "10.32.0.0/16"
}

TASK [openstack.cloud.project] ********************************************************
changed: [localhost]

TASK [openstack.cloud.quota] **********************************************************
changed: [localhost]

TASK [openstack.cloud.identity_user] **************************************************
[WARNING]: Module did not set no_log for update_password
changed: [localhost]

TASK [openstack.cloud.role_assignment] ************************************************
changed: [localhost]

TASK [openstack.cloud.role_assignment] ************************************************
changed: [localhost]

TASK [openstack.cloud.network] ********************************************************
changed: [localhost]

TASK [openstack.cloud.subnet] *********************************************************
changed: [localhost]

TASK [openstack.cloud.network] ********************************************************
changed: [localhost]

TASK [openstack.cloud.subnet] *********************************************************
changed: [localhost]

TASK [openstack.cloud.subnet] *********************************************************
skipping: [localhost]

TASK [openstack.cloud.router] *********************************************************
changed: [localhost]

TASK [openstack.cloud.router] *********************************************************
skipping: [localhost]

TASK [openstack.cloud.security_group] *************************************************
changed: [localhost]

TASK [openstack.cloud.security_group_rule] ********************************************
changed: [localhost]

TASK [openstack.cloud.security_group_rule] ********************************************
changed: [localhost] => (item=22)
changed: [localhost] => (item=80)
changed: [localhost] => (item=443)
changed: [localhost] => (item=2376)
changed: [localhost] => (item=6443)

TASK [openstack.cloud.security_group_rule] ********************************************
changed: [localhost] => (item=tcp)
changed: [localhost] => (item=udp)

PLAY RECAP ****************************************************************************
localhost : ok=18 changed=14 unreachable=0 failed=0 skipped=2 rescued=0 ignored=0

app project created successfully

將新使用者新增至 Keycloak

參見建立使用者(單一登入)

透過 VIP 登入 CubeCOS 儀表板,並撤銷新使用者的 Rancher 管理員權限

參閱 Rancher 管理員權限