You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@cloudstack.apache.org by Rakesh Venkatesh <ww...@gmail.com> on 2020/01/09 08:59:15 UTC

Temporarily disabling API requests

Hello folks


Is there a better way to disable all the VM related API's for a short
duration of time? Like I want to disable stop/start/migrate/destroy VM API.
I'm thinking of disabling the user so that the user cant send any API
requests. After some time I will enable the user back. Is there any other
better way to do it?

-- 
Thanks and regards
Rakesh

Re: Temporarily disabling API requests

Posted by Nux! <nu...@li.nux.ro>.
Editing the roles is a great idea and proly the easiest, not to mention 
if you disable the user all its VMs will be automatically shut down, 
might be something you want to avoid.

---
Sent from the Delta quadrant using Borg technology!

On 2020-01-09 09:12, Andrija Panic wrote:
> You can try editing the User role (ACS 4.9+) and explicitly add the 
> deny
> "ACL" for those API calls which you want to deny
> Later just remove the "ACL" rules.
> 
> On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh 
> <ww...@gmail.com>
> wrote:
> 
>> Hello folks
>> 
>> 
>> Is there a better way to disable all the VM related API's for a short
>> duration of time? Like I want to disable stop/start/migrate/destroy VM 
>> API.
>> I'm thinking of disabling the user so that the user cant send any API
>> requests. After some time I will enable the user back. Is there any 
>> other
>> better way to do it?
>> 
>> --
>> Thanks and regards
>> Rakesh
>> 

Re: Temporarily disabling API requests

Posted by Nux! <nu...@li.nux.ro>.
Editing the roles is a great idea and proly the easiest, not to mention 
if you disable the user all its VMs will be automatically shut down, 
might be something you want to avoid.

---
Sent from the Delta quadrant using Borg technology!

On 2020-01-09 09:12, Andrija Panic wrote:
> You can try editing the User role (ACS 4.9+) and explicitly add the 
> deny
> "ACL" for those API calls which you want to deny
> Later just remove the "ACL" rules.
> 
> On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh 
> <ww...@gmail.com>
> wrote:
> 
>> Hello folks
>> 
>> 
>> Is there a better way to disable all the VM related API's for a short
>> duration of time? Like I want to disable stop/start/migrate/destroy VM 
>> API.
>> I'm thinking of disabling the user so that the user cant send any API
>> requests. After some time I will enable the user back. Is there any 
>> other
>> better way to do it?
>> 
>> --
>> Thanks and regards
>> Rakesh
>> 

Re: Temporarily disabling API requests

Posted by Rakesh Venkatesh <ww...@gmail.com>.
Thanks Andrija. Yes that's the better way

On Thu, Jan 9, 2020 at 10:13 AM Andrija Panic <an...@gmail.com>
wrote:

> You can try editing the User role (ACS 4.9+) and explicitly add the deny
> "ACL" for those API calls which you want to deny
> Later just remove the "ACL" rules.
>
> On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh <ww...@gmail.com>
> wrote:
>
> > Hello folks
> >
> >
> > Is there a better way to disable all the VM related API's for a short
> > duration of time? Like I want to disable stop/start/migrate/destroy VM
> API.
> > I'm thinking of disabling the user so that the user cant send any API
> > requests. After some time I will enable the user back. Is there any other
> > better way to do it?
> >
> > --
> > Thanks and regards
> > Rakesh
> >
>
>
> --
>
> Andrija Panić
>


-- 
Thanks and regards
Rakesh venkatesh

Re: Temporarily disabling API requests

Posted by Rakesh Venkatesh <ww...@gmail.com>.
Thanks Andrija. Yes that's the better way

On Thu, Jan 9, 2020 at 10:13 AM Andrija Panic <an...@gmail.com>
wrote:

> You can try editing the User role (ACS 4.9+) and explicitly add the deny
> "ACL" for those API calls which you want to deny
> Later just remove the "ACL" rules.
>
> On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh <ww...@gmail.com>
> wrote:
>
> > Hello folks
> >
> >
> > Is there a better way to disable all the VM related API's for a short
> > duration of time? Like I want to disable stop/start/migrate/destroy VM
> API.
> > I'm thinking of disabling the user so that the user cant send any API
> > requests. After some time I will enable the user back. Is there any other
> > better way to do it?
> >
> > --
> > Thanks and regards
> > Rakesh
> >
>
>
> --
>
> Andrija Panić
>


-- 
Thanks and regards
Rakesh venkatesh

Re: Temporarily disabling API requests

Posted by Andrija Panic <an...@gmail.com>.
You can try editing the User role (ACS 4.9+) and explicitly add the deny
"ACL" for those API calls which you want to deny
Later just remove the "ACL" rules.

On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh <ww...@gmail.com>
wrote:

> Hello folks
>
>
> Is there a better way to disable all the VM related API's for a short
> duration of time? Like I want to disable stop/start/migrate/destroy VM API.
> I'm thinking of disabling the user so that the user cant send any API
> requests. After some time I will enable the user back. Is there any other
> better way to do it?
>
> --
> Thanks and regards
> Rakesh
>


-- 

Andrija Panić

Re: Temporarily disabling API requests

Posted by Andrija Panic <an...@gmail.com>.
You can try editing the User role (ACS 4.9+) and explicitly add the deny
"ACL" for those API calls which you want to deny
Later just remove the "ACL" rules.

On Thu, 9 Jan 2020 at 09:59, Rakesh Venkatesh <ww...@gmail.com>
wrote:

> Hello folks
>
>
> Is there a better way to disable all the VM related API's for a short
> duration of time? Like I want to disable stop/start/migrate/destroy VM API.
> I'm thinking of disabling the user so that the user cant send any API
> requests. After some time I will enable the user back. Is there any other
> better way to do it?
>
> --
> Thanks and regards
> Rakesh
>


-- 

Andrija Panić