bc7a9f0da7
Partial-Bug: #1250515 backport: havana Change-Id: I9675dffd130c8aa6343143d9806adb4e0b74a55d author: diane fleming
53 lines
2.5 KiB
XML
53 lines
2.5 KiB
XML
<?xml version="1.0" encoding="UTF-8"?>
|
|
<section xmlns="http://docbook.org/ns/docbook"
|
|
xmlns:xi="http://www.w3.org/2001/XInclude"
|
|
xmlns:xlink="http://www.w3.org/1999/xlink" version="5.0"
|
|
xml:id="configuring-tenant-specific-storage-for-images">
|
|
<title>Configure tenant-specific image locations with Object
|
|
Storage</title>
|
|
<para>For some deployers, it is not ideal to store all images in
|
|
one place to enable all tenants and users to access them. You
|
|
can configure the Image Service to store image data in
|
|
tenant-specific image locations. Then, only the following
|
|
tenants can use the Image Service to access the created image:<itemizedlist>
|
|
<listitem>
|
|
<para>The tenant who owns the image</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para>Tenants that are defined in
|
|
<option>swift_store_admin_tenants</option> and
|
|
that have admin-level accounts</para>
|
|
</listitem>
|
|
</itemizedlist></para>
|
|
<procedure>
|
|
<title>To configure tenant-specific image locations</title>
|
|
<step>
|
|
<para>Configure swift as your
|
|
<option>default_store</option> in the
|
|
<filename>glance-api.conf</filename> file.</para>
|
|
</step>
|
|
<step>
|
|
<para>Set these configuration options in the
|
|
<filename>glance-api.conf</filename> file: <itemizedlist>
|
|
<listitem>
|
|
<para><option>swift_store_multi_tenant</option>.
|
|
Set to <literal>True</literal> to enable
|
|
tenant-specific storage locations. Default
|
|
is <literal>False</literal>.</para>
|
|
</listitem>
|
|
<listitem>
|
|
<para><option>swift_store_admin_tenants</option>.
|
|
Specify a list of tenant IDs that can
|
|
grant read and write access to all Object
|
|
Storage containers that are created by the
|
|
Image Service.</para>
|
|
</listitem>
|
|
</itemizedlist></para>
|
|
</step>
|
|
</procedure>
|
|
<para>With this configuration, images are stored in an
|
|
Object Storage service (swift) endpoint that is pulled
|
|
from the service catalog for the authenticated
|
|
user.</para>
|
|
</section>
|