You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Giri Prasad <g_...@yahoo.com.INVALID> on 2014/08/11 12:36:30 UTC
Zones, Domains and Templates
Hi,
I have a customer with several departments like : dept1, dept2, dept3 etc etc. I installed CS and am done with the provisioning process.
Now, I want to create a vm for each dept. For ex: vm1->for->dept1, vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of application suite.
The requirement is to assign a user to a dept. And when the user (in a specific dept) log's in, he/she should be able to see only the vm(and its app suite), for that specific dept.
Any insights on how to implement the zone, domains, and templates for this scenario.
Thanks & Regards,
Giri
Re: Zones, Domains and Templates
Posted by Giri Prasad <g_...@yahoo.com.INVALID>.
Thanks for your valuable insights.
Please dont mind the late reply, since I was travelling.
How to assign virtual resources like a vm (instance), disk/network offering to a specific project.
And where to find some good documentation on creating and using of the projects in cloudstack. Most of the ones I see, are only talking about the very standard procedures like adding users to projects and project
invitations etc.
I am looking at some documentation, which talks about assigning vm's, disk(s), networks and other virtual resources to the projects. And as well as some material on assigning access controls to the virtual resources, which can be used only by the authorised users on that project.
________________________________
From: Xerex Bueno <xb...@LPSIntegration.COM>
To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org" <de...@cloudstack.apache.org>
Sent: Wednesday, 13 August 2014 8:40 PM
Subject: Re: Zones, Domains and Templates
That sounds right. The only thing I can think of is if you mark the
templates as public they will be able to be seen across multiple domains.
On 8/12/14, 2:10 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Thanks for your comments.
>
>I have the seen the documentation, talking of adding users and project
>invitations etc. How to assign virtual resources like a vm (instance),
>disk/networking to a specific project.
>
>As far as domains are concerned, I was thinking as follows, please
>correct, if any err:
>
> create private zone, create domain within that zone, login as domain
>admin, create vm and apps, create template for vm and create users for
>that domain.
>
>
> When the user log's in into that domain, he/she should be able to see
>only the templates in that zone, right?
>
>
>
>
>
>________________________________
> From: Xerex Bueno <xb...@LPSIntegration.COM>
>To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri
>Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org"
><de...@cloudstack.apache.org>
>Sent: Monday, 11 August 2014 7:05 PM
>Subject: Re: Zones, Domains and Templates
>
>
>You could create a different domain for each department, or you could
>create separate projects for every department. I would think projects
>would be easier in terms of user management if you have lateral movement
>between those groups.
>
>
>
>
>
>
>
>On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>
>>Hi,
>>
>> I have a customer with several departments like : dept1, dept2, dept3
>>etc etc. I installed CS and am done with the provisioning process.
>>
>> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>>application suite.
>>
>> The requirement is to assign a user to a dept. And when the user (in a
>>specific dept) log's in, he/she should be able to see only the vm(and its
>>app suite), for that specific dept.
>>
>> Any insights on how to implement the zone, domains, and templates for
>>this scenario.
>>
>>Thanks & Regards,
>>Giri
>
>
>________________________________
>
>This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated,
>redistributed, or displayed to any other party without the expressed
>written permission of LPS Integration, Inc. If you are not the intended
>recipient and have received this email in error, please destroy the email
>and contact the LPS Integration Security Officer at 866-577-2902 (Phone),
>615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228
>(US Mail)
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Giri Prasad <g_...@yahoo.com.INVALID>.
Thanks for your valuable insights.
Please dont mind the late reply, since I was travelling.
How to assign virtual resources like a vm (instance), disk/network offering to a specific project.
And where to find some good documentation on creating and using of the projects in cloudstack. Most of the ones I see, are only talking about the very standard procedures like adding users to projects and project
invitations etc.
I am looking at some documentation, which talks about assigning vm's, disk(s), networks and other virtual resources to the projects. And as well as some material on assigning access controls to the virtual resources, which can be used only by the authorised users on that project.
________________________________
From: Xerex Bueno <xb...@LPSIntegration.COM>
To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org" <de...@cloudstack.apache.org>
Sent: Wednesday, 13 August 2014 8:40 PM
Subject: Re: Zones, Domains and Templates
That sounds right. The only thing I can think of is if you mark the
templates as public they will be able to be seen across multiple domains.
On 8/12/14, 2:10 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Thanks for your comments.
>
>I have the seen the documentation, talking of adding users and project
>invitations etc. How to assign virtual resources like a vm (instance),
>disk/networking to a specific project.
>
>As far as domains are concerned, I was thinking as follows, please
>correct, if any err:
>
> create private zone, create domain within that zone, login as domain
>admin, create vm and apps, create template for vm and create users for
>that domain.
>
>
> When the user log's in into that domain, he/she should be able to see
>only the templates in that zone, right?
>
>
>
>
>
>________________________________
> From: Xerex Bueno <xb...@LPSIntegration.COM>
>To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri
>Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org"
><de...@cloudstack.apache.org>
>Sent: Monday, 11 August 2014 7:05 PM
>Subject: Re: Zones, Domains and Templates
>
>
>You could create a different domain for each department, or you could
>create separate projects for every department. I would think projects
>would be easier in terms of user management if you have lateral movement
>between those groups.
>
>
>
>
>
>
>
>On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>
>>Hi,
>>
>> I have a customer with several departments like : dept1, dept2, dept3
>>etc etc. I installed CS and am done with the provisioning process.
>>
>> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>>application suite.
>>
>> The requirement is to assign a user to a dept. And when the user (in a
>>specific dept) log's in, he/she should be able to see only the vm(and its
>>app suite), for that specific dept.
>>
>> Any insights on how to implement the zone, domains, and templates for
>>this scenario.
>>
>>Thanks & Regards,
>>Giri
>
>
>________________________________
>
>This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated,
>redistributed, or displayed to any other party without the expressed
>written permission of LPS Integration, Inc. If you are not the intended
>recipient and have received this email in error, please destroy the email
>and contact the LPS Integration Security Officer at 866-577-2902 (Phone),
>615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228
>(US Mail)
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Xerex Bueno <xb...@LPSIntegration.COM>.
That sounds right. The only thing I can think of is if you mark the
templates as public they will be able to be seen across multiple domains.
On 8/12/14, 2:10 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Thanks for your comments.
>
>I have the seen the documentation, talking of adding users and project
>invitations etc. How to assign virtual resources like a vm (instance),
>disk/networking to a specific project.
>
>As far as domains are concerned, I was thinking as follows, please
>correct, if any err:
>
> create private zone, create domain within that zone, login as domain
>admin, create vm and apps, create template for vm and create users for
>that domain.
>
>
> When the user log's in into that domain, he/she should be able to see
>only the templates in that zone, right?
>
>
>
>
>
>________________________________
> From: Xerex Bueno <xb...@LPSIntegration.COM>
>To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri
>Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org"
><de...@cloudstack.apache.org>
>Sent: Monday, 11 August 2014 7:05 PM
>Subject: Re: Zones, Domains and Templates
>
>
>You could create a different domain for each department, or you could
>create separate projects for every department. I would think projects
>would be easier in terms of user management if you have lateral movement
>between those groups.
>
>
>
>
>
>
>
>On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>
>>Hi,
>>
>> I have a customer with several departments like : dept1, dept2, dept3
>>etc etc. I installed CS and am done with the provisioning process.
>>
>> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>>application suite.
>>
>> The requirement is to assign a user to a dept. And when the user (in a
>>specific dept) log's in, he/she should be able to see only the vm(and its
>>app suite), for that specific dept.
>>
>> Any insights on how to implement the zone, domains, and templates for
>>this scenario.
>>
>>Thanks & Regards,
>>Giri
>
>
>________________________________
>
>This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated,
>redistributed, or displayed to any other party without the expressed
>written permission of LPS Integration, Inc. If you are not the intended
>recipient and have received this email in error, please destroy the email
>and contact the LPS Integration Security Officer at 866-577-2902 (Phone),
>615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228
>(US Mail)
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Xerex Bueno <xb...@LPSIntegration.COM>.
That sounds right. The only thing I can think of is if you mark the
templates as public they will be able to be seen across multiple domains.
On 8/12/14, 2:10 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Thanks for your comments.
>
>I have the seen the documentation, talking of adding users and project
>invitations etc. How to assign virtual resources like a vm (instance),
>disk/networking to a specific project.
>
>As far as domains are concerned, I was thinking as follows, please
>correct, if any err:
>
> create private zone, create domain within that zone, login as domain
>admin, create vm and apps, create template for vm and create users for
>that domain.
>
>
> When the user log's in into that domain, he/she should be able to see
>only the templates in that zone, right?
>
>
>
>
>
>________________________________
> From: Xerex Bueno <xb...@LPSIntegration.COM>
>To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri
>Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org"
><de...@cloudstack.apache.org>
>Sent: Monday, 11 August 2014 7:05 PM
>Subject: Re: Zones, Domains and Templates
>
>
>You could create a different domain for each department, or you could
>create separate projects for every department. I would think projects
>would be easier in terms of user management if you have lateral movement
>between those groups.
>
>
>
>
>
>
>
>On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>
>>Hi,
>>
>> I have a customer with several departments like : dept1, dept2, dept3
>>etc etc. I installed CS and am done with the provisioning process.
>>
>> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>>application suite.
>>
>> The requirement is to assign a user to a dept. And when the user (in a
>>specific dept) log's in, he/she should be able to see only the vm(and its
>>app suite), for that specific dept.
>>
>> Any insights on how to implement the zone, domains, and templates for
>>this scenario.
>>
>>Thanks & Regards,
>>Giri
>
>
>________________________________
>
>This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated,
>redistributed, or displayed to any other party without the expressed
>written permission of LPS Integration, Inc. If you are not the intended
>recipient and have received this email in error, please destroy the email
>and contact the LPS Integration Security Officer at 866-577-2902 (Phone),
>615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228
>(US Mail)
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Giri Prasad <g_...@yahoo.com.INVALID>.
Thanks for your comments.
I have the seen the documentation, talking of adding users and project invitations etc. How to assign virtual resources like a vm (instance), disk/networking to a specific project.
As far as domains are concerned, I was thinking as follows, please correct, if any err:
create private zone, create domain within that zone, login as domain admin, create vm and apps, create template for vm and create users for that domain.
When the user log's in into that domain, he/she should be able to see only the templates in that zone, right?
________________________________
From: Xerex Bueno <xb...@LPSIntegration.COM>
To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org" <de...@cloudstack.apache.org>
Sent: Monday, 11 August 2014 7:05 PM
Subject: Re: Zones, Domains and Templates
You could create a different domain for each department, or you could
create separate projects for every department. I would think projects
would be easier in terms of user management if you have lateral movement
between those groups.
On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Hi,
>
> I have a customer with several departments like : dept1, dept2, dept3
>etc etc. I installed CS and am done with the provisioning process.
>
> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>application suite.
>
> The requirement is to assign a user to a dept. And when the user (in a
>specific dept) log's in, he/she should be able to see only the vm(and its
>app suite), for that specific dept.
>
> Any insights on how to implement the zone, domains, and templates for
>this scenario.
>
>Thanks & Regards,
>Giri
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Giri Prasad <g_...@yahoo.com.INVALID>.
Thanks for your comments.
I have the seen the documentation, talking of adding users and project invitations etc. How to assign virtual resources like a vm (instance), disk/networking to a specific project.
As far as domains are concerned, I was thinking as follows, please correct, if any err:
create private zone, create domain within that zone, login as domain admin, create vm and apps, create template for vm and create users for that domain.
When the user log's in into that domain, he/she should be able to see only the templates in that zone, right?
________________________________
From: Xerex Bueno <xb...@LPSIntegration.COM>
To: "users@cloudstack.apache.org" <us...@cloudstack.apache.org>; Giri Prasad <g_...@yahoo.com>; "dev@cloudstack.apache.org" <de...@cloudstack.apache.org>
Sent: Monday, 11 August 2014 7:05 PM
Subject: Re: Zones, Domains and Templates
You could create a different domain for each department, or you could
create separate projects for every department. I would think projects
would be easier in terms of user management if you have lateral movement
between those groups.
On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Hi,
>
> I have a customer with several departments like : dept1, dept2, dept3
>etc etc. I installed CS and am done with the provisioning process.
>
> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>application suite.
>
> The requirement is to assign a user to a dept. And when the user (in a
>specific dept) log's in, he/she should be able to see only the vm(and its
>app suite), for that specific dept.
>
> Any insights on how to implement the zone, domains, and templates for
>this scenario.
>
>Thanks & Regards,
>Giri
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Xerex Bueno <xb...@LPSIntegration.COM>.
You could create a different domain for each department, or you could
create separate projects for every department. I would think projects
would be easier in terms of user management if you have lateral movement
between those groups.
On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Hi,
>
> I have a customer with several departments like : dept1, dept2, dept3
>etc etc. I installed CS and am done with the provisioning process.
>
> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>application suite.
>
> The requirement is to assign a user to a dept. And when the user (in a
>specific dept) log's in, he/she should be able to see only the vm(and its
>app suite), for that specific dept.
>
> Any insights on how to implement the zone, domains, and templates for
>this scenario.
>
>Thanks & Regards,
>Giri
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)
Re: Zones, Domains and Templates
Posted by Xerex Bueno <xb...@LPSIntegration.COM>.
You could create a different domain for each department, or you could
create separate projects for every department. I would think projects
would be easier in terms of user management if you have lateral movement
between those groups.
On 8/11/14, 5:36 AM, "Giri Prasad" <g_...@yahoo.com.INVALID> wrote:
>Hi,
>
> I have a customer with several departments like : dept1, dept2, dept3
>etc etc. I installed CS and am done with the provisioning process.
>
> Now, I want to create a vm for each dept. For ex: vm1->for->dept1,
>vm2->for->dept2, vm3->for->dept3. Each vm's will have its own set of
>application suite.
>
> The requirement is to assign a user to a dept. And when the user (in a
>specific dept) log's in, he/she should be able to see only the vm(and its
>app suite), for that specific dept.
>
> Any insights on how to implement the zone, domains, and templates for
>this scenario.
>
>Thanks & Regards,
>Giri
________________________________
This document is PROPRIETARY and CONFIDENTIAL and may not be duplicated, redistributed, or displayed to any other party without the expressed written permission of LPS Integration, Inc. If you are not the intended recipient and have received this email in error, please destroy the email and contact the LPS Integration Security Officer at 866-577-2902 (Phone), 615-349-9009 (Fax) or 230 Great Circle Rd. Suite 218 Nashville, TN 37228 (US Mail)