Yes, you can. You need to modify /etc/mso/config.d/cloud_config.json in the SO 
container to have multiple cloud sites and multiple keystones, if the tenants 
belong to different OpenStack labs. Otherwise, one identity service will 
suffice. Something like this

{
    "identity_services":
    {
        "DEFAULT_KEYSTONE":
        {
          "identity_url": "http://URL1/v2.0<http://135.197.225.10:35357/v2.0>",
          "mso_id": "admin",
          "mso_pass": "2fa2266344b4caaca1eba8264d277831",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": true,
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        },
        "REGION_TWO_KEYSTONE":
        {
          "identity_url": 
"http://URL2/v2.0<http://10.43.213.157:9001/api/multicloud/v0/CloudOwner_RegionTwo/identity/v2.0>",
          "mso_id": "admin",
          "mso_pass": "f461eb3230f0b4b7b1ce8ed018da155f",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": true,
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        }
    },
    "cloud_sites":
    {
        "RegionOne":
        {
          "region_id": "RegionOne",
          "clli": "RegionOne",
          "aic_version": "2.5",
          "identity_service_id": "DEFAULT_KEYSTONE"
        },
        "RegionTwo":
        {
          "region_id": "RegionTwo",
          "clli": "RegionTwo",
          "aic_version": "2.5",
          "identity_service_id": "REGION_TWO_KEYSTONE"
        }
    }


As an alternative, one can modify /dockerdata-nfs/onap/mso/mso/mso-docker.json 
in NFS as follows. This will make changes permanent across SO container reboots:

      "identity_services":
      [
        {
          "dcp_clli": "DEFAULT_KEYSTONE",
          "identity_url": "http://URL1/v2.0<http://135.197.225.10:35357/v2.0>",
          "mso_id": "admin",
          "mso_pass": "2fa2266344b4caaca1eba8264d277831",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": "true",
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        },
        {
          "dcp_clli": "REGION_TWO_KEYSTONE",
          "identity_url": "http://URL2 /v2.0<http://URL2%20/v2.0>",
          "mso_id": "admin",
          "mso_pass": "f461eb3230f0b4b7b1ce8ed018da155f",
          "admin_tenant": "service",
          "member_role": "admin",
          "tenant_metadata": "true",
          "identity_server_type": "KEYSTONE",
          "identity_authentication_type": "USERNAME_PASSWORD"
        }
      ],

      "cloud_sites":
      [
        {
          "id": "RegionOne",
          "aic_version": "2.5",
          "lcp_clli": "RegionOne",
          "region_id": "RegionOne",
          "identity_service_id": "DEFAULT_KEYSTONE"
        },
        {
          "id": "RegionTwo",
          "aic_version": "2.5",
          "lcp_clli": "RegionTwo",
          "region_id": "RegionTwo",
          "identity_service_id": "REGION_TWO_KEYSTONE"
        }
      ],

Marco

From: <[email protected]> on behalf of "[email protected]" 
<[email protected]>
Reply-To: "[email protected]" <[email protected]>, 
"[email protected]" <[email protected]>
Date: Wednesday, November 14, 2018 at 3:53 AM
To: Viswa KSP <[email protected]>, "[email protected]" 
<[email protected]>
Subject: Re: [onap-discuss] Does ONAP support Multi-tenant Openstack deployment?

Hello,

I am  wondering the answer  of same  question. Can we  deploy  VNF's  in  
different  Openstack   tenants with  Onap  Beijing ?

If  we  could do, how  is it  possible ?

Thanks,
Gulsum


-=-=-=-=-=-=-=-=-=-=-=-
Links: You receive all messages sent to this group.

View/Reply Online (#13734): https://lists.onap.org/g/onap-discuss/message/13734
Mute This Topic: https://lists.onap.org/mt/22455531/21656
Group Owner: [email protected]
Unsubscribe: https://lists.onap.org/g/onap-discuss/unsub  
[[email protected]]
-=-=-=-=-=-=-=-=-=-=-=-

Reply via email to