Beside the basic configuration options such as cpu, ram and disk, the following options need to be set to ensure project resource security.
First the flavor should be private and access granted to your project(s)
To do so on a command line the options are:
--private --property filter_tenant_id='insert project id here' --project 'insert project id here'
These should be included with the rest of the options you wish to set for your flavor.
In the dashboard, while creating the flavor add your project via the ‘Flavor Access” tab. This will imply that the flavor will be private.
A heat template resource would look like:
project_flavor_1:
type: OS::Nova::Flavor
properties:
ram: 2000
disk: 20
vcpus: 1
name:
list_join: ['-',[{get_param: project_name}, 'm1.tiny']]
extra_specs:
filter_tenant_id: 'insert tenant id here'
is_public: False
tenants:
- 'insert tenant id here'