Projects
Projects are isolated containers for your cloud resources. Each project provides a separate namespace for VMs, storage, networking, and other resources, with its own access controls and quota tracking.
What projects provide
Projects give you:
- Resource isolation - Resources in different projects are completely separate
- Access control - Each project has its own permission sets controlling who can access it
- Namespace separation - Resource names only need to be unique within a project
- Quota tracking - Resource usage is tracked per project
Project structure
Projects have a flat structure. You can't nest projects within each other, but you can create as many projects as you need within your organization.
Common patterns for organizing projects include:
- By environment -
dev,staging,production - By team -
frontend,backend,data-platform - By application -
web-app,api-service,batch-jobs
Organization
├── dev
├── staging
├── production
├── data-platform
└── shared-services
Working with projects
Creating projects
Create a project using the evroc CLI:
evroc iam project create my-project --name "My Project"
For step-by-step instructions, see Create a project.
Listing projects
List all projects you have access to:
evroc iam project list
Switching projects
Set your current working project for CLI operations:
evroc config set-project my-project
All subsequent commands operate on this project until you switch to another.
Access control
Access to a project is controlled through permission sets. A user needs a permission set in a project to access its resources.
Organization administrators automatically have access to all projects. Project-level permission sets grant access only to that specific project.