Projects and quota
OpenShift projects and CSC computing projects
Projects in OpenShift are separate from CSC computing projects. A single CSC computing project can have access to multiple projects in OpenShift. Each CSC computing project with access to Rahti receives a group in OpenShift.
Rahti can be used free of charge for open research and education in Finnish universities and polytechnics.
All projects in OpenShift must be mapped to a CSC computing project. This
mapping is used to determine which CSC computing project a given resource
belongs to for billing and other purposes. If you only have one CSC computing
project with access to Rahti, this mapping will be done
automatically. If you have more than one CSC computing project, you need to
specify which of them to use. You can do so by entering
by the name or number of your CSC computing project in the Description field
when creating a new project in OpenShift. You can also enter other text in the
description field if you want to have a human-readable description for
the project you are creating.
For example, if you have Rahti access via project_1000123, you would enter the following in the Description field:
You can also enter a human-readable description for the project, in which case the field could look like this:
This project is used for hosting the Pied Piper web application. csc_project: project_1000123
This would make it so that any usage within that OpenShift project is billed to the billing unit quota of project_1000123. Note that project_1000123 must have Rahti access and you must be a member of that computing project, or the OpenShift project creation will fail.
If you would like to know which CSC computing projects you are a member of, you can view a list in the My Projects tool of MyCSC. You can also set a default billing project by going to Your Profile page. Select the project you would like to have as your default billing project and click on "Save". After doing this, the default billing project will be selected as the billing project for OpenShift projects if you do not explicitly specify one.
If you would like to know which CSC computing project an OpenShift project is associated with, you can do so using the oc command line tool. You can find instructions for setting up oc in the command line tool usage instructions . For example, if your OpenShift project is called my-openshift-project, you would run:
oc get project my-openshift-project -o yaml
This should produce the following output:
apiVersion: project.openshift.io/v1 kind: Project metadata: annotations: ... creationTimestamp: 2018-11-22T12:27:05Z labels: csc_project: "1000123" name: my-openshift-project resourceVersion: "72557736" selfLink: /apis/project.openshift.io/v1/projects/my-openshift-project uid: df4970e2-abd7-4417-adbf-531293c68cd6 spec: finalizers: - openshift.io/origin - kubernetes status: phase: Active
In the output above, you can find the associated CSC computing project under
metadata.labels.csc_project. In this case, the project is
Unfortunately, this information is not available via a web interface yet.
It is not possible for normal users to change the csc_project label after a project has been created. If you would like to change the label for an existing project, please contact the support. You can also create a completely new project if you want to use a different label.
Creating a project
Click the blue "Create Project" button to create a project, and you will be presented with the following view:
You need to pick a unique name that is not in use by any other project in the system. You can also enter a human-readable display name and a description for the project. You may also enter a CSC computing project in the Description field as described above. Once you have filled in the fields, click "Create", and you will see the application catalog where you can pick an application template or import your own one.
For more information about using the web interface, refer to the official OpenShift documentation. You can find out which version of the documentation to look at in the web interface by clicking the question mark symbol in the top bar and selecting "About".
Two kinds of quota are applied in OpenShift:
- Total number of projects per user
- Resources created inside a project
By default, users can create up to five projects. Each of them has its own quota for the following resources:
|Virtual cores per pod||2|
|Virtual cores per container||2|
|RAM per pod||8 GiB|
|RAM per container||8 GiB|
|Number of image streams||10|
|Size of each registry images||5 GiB|
You can find the resource usage and quota of a project in the project view in the web interface under Resources -> Quota. Alternatively, you can use the oc command line tool:
oc describe quota oc describe limitranges
If you need to create more projects or you need more resources in a project for your application, you can apply for more quota by contacting the Rahti support. See the Contact page for instructions. Quota requests are handled on a case-by-case basis depending on the currently available resources in Rahti and the use case.
Sharing projects with other users
OpenShift has a flexible role-based access control system that allows you to give access to projects you have created to other users and groups in the system. You can give e.g. full admin, basic user, edit or read only access to other users and groups in the system for collaboration.
You can edit project memberships in the web interface via Resources -> Membership. You can either give access rights to individual users or groups by selecting either the Users or Groups tab and clicking Edit Membership in the top right corner.
Note that it is important to use correct usernames when sharing projects with others. OpenShift allows you to freely enter any username and will not notify you for having entered a non-existent username. Usernames are also case-sensitive. You can find out your username in OpenShift via either the web interface or the command line:
- In the web interface, click the question mark symbol in the top bar and select "Command Line Tools". You can find your username above the text box that has the login command.
- If you have an active command line session, you can use the command
If you would like to share a project you have created with members of the same CSC computing project, you can do so by selecting the Groups tab, clicking Edit Membership, and entering the name of the computing project and a role in the dropdown menu on the right for the members of that computing project.