You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@cloudstack.apache.org by an...@apache.org on 2019/07/30 16:52:57 UTC
[cloudstack-documentation] 01/01: Template sharing doc update
This is an automated email from the ASF dual-hosted git repository.
andrijapanic pushed a commit to branch template-sharing-doc-update
in repository https://gitbox.apache.org/repos/asf/cloudstack-documentation.git
commit 8a5e64f97166265a7b813ed42ece9ef6bb4f5346
Author: Andrija Panic <45...@users.noreply.github.com>
AuthorDate: Tue Jul 30 18:52:52 2019 +0200
Template sharing doc update
---
source/adminguide/templates.rst | 57 +++++++++++++++++++++++++++++++++++++++--
1 file changed, 55 insertions(+), 2 deletions(-)
diff --git a/source/adminguide/templates.rst b/source/adminguide/templates.rst
index 07c0423..d4e64e0 100644
--- a/source/adminguide/templates.rst
+++ b/source/adminguide/templates.rst
@@ -207,7 +207,7 @@ Uploading Templates from a remote HTTP server
vSphere Templates and ISOs
---------------------------
+^^^^^^^^^^^^^^^^^^^^^^^^^^
.. warning::
If you are uploading a template that was created using vSphere Client,
be sure the OVA file does not contain an ISO. If it does, the deployment
@@ -288,6 +288,46 @@ Example GUI dialog of uploading (ISO) from local (browser) is given below:
|upload-iso-from-local.png|
+Sharing templates with other accounts/projects
+----------------------------------------------
+
+When adding a template, the owner can choose to make template public or to keep it private. Once the template is created, the owner can choose to share this template so that other accounts/projects can also use the template.
+
+Currently, the template owner can share his template with:
+ - other acounts inside his own domain (i.e. can't share the template with other accounts in the subdomain of his domain or any other domains)
+ - projects where he belongs to (ie. if he is the owner/creator or projects of other users where he has been joined)
+
+Template permissions can be changed via updateTemplatePermissions API call or via GUI. It is supported to add, remove or reset (remove all) template permissions.
+
+When adding or removing permissons to/from a template, it is required to specify account/project name which is being added/removed from the template permissions.
+
+Global setting "allow.user.view.all.domain.accounts" has a default value of "false". This makes sure that when the user wants to share a template via GUI, he will not be shown the list of all accounts in his domain and he will need to know the name of the destination account with which he is sharing the template. This makes sense in public clouds where each account of a single domain is a different tenant/customer and privacy is imperative. In this case, the user will be presented with a [...]
+
+|template-permissions-update-manually-1.PNG|
+Sharing template with account "user2"
+
+|template-permissions-update-manually-2.PNG|
+Revoking permissions from account "user2"
+
+But in environments where privacy within a domain is not an issues, setting "allow.user.view.all.domain.accounts" setting to "true" will make sure that the user, who is sharing the template, will be presented a more user-friendly multi-select list, listing all the accounts in his domain. THis is shown in the images below;
+
+|template-permissions-update-1.PNG|
+Sharing template with just account "user8"
+
+|template-permissions-update-2.PNG|
+Sharing template with 2 specific projects
+
+|template-permissions-update-3.PNG|
+Revoking permissins from account "user8"
+
+|template-permissions-update-4.PNG|
+Revoking permsissons from both projects previously added
+
+Finally, template permissions can be reset:
+
+
+|template-permissions-update-5.PNG"
+Reseting (removing all) permissions
Exporting Templates
-------------------
@@ -330,4 +370,17 @@ template.
.. |kvm-direct-download.png| image:: /_static/images/kvm-direct-download.png
.. |upload-iso-from-local.png| image:: /_static/images/upload-iso-from-local.png
:alt: Upload ISO from local
-
+.. |template-permissions-update-manually-1.PNG| image:: /_static/images/template-permissions-update-manually-1.PNG
+ :alt: USharing template with account "user2"
+.. |template-permissions-update-manually-2.PNG| image:: /_static/images/template-permissions-update-manually-2.PNG
+ :alt: Revoking permissions from account "user2"
+.. |template-permissions-update-1.PNG| image:: /_static/images/template-permissions-update-1.PNG
+ :alt: Sharing template with just account "user8"
+.. |template-permissions-update-2.PNG| image:: /_static/images/template-permissions-update-2.PNG
+ :alt: Sharing template with 2 specific projects
+.. |template-permissions-update-3.PNG| image:: /_static/images/template-permissions-update-3.PNG
+ :alt: Revoking permissins from account "user8"
+.. |template-permissions-update-4.PNG| image:: /_static/images/template-permissions-update-4.PNG
+ :alt: Revoking permsissons from both projects previously added
+.. |template-permissions-update-5.PNG| image:: /_static/images/template-permissions-update-5.PNG
+ :alt: Reseting (removing all) permissions