...
Dedicating pod, cluster or host to a specific domain/account means that the domain/account will have sole access to the dedicated pod, cluster or hosts such that scalability, security and manageability within a domain/account can be improved. The resources which belong to that tenant, will be placed into that dedicated pod, cluster or host.
...
- Currently in CloudStack, zones can be reserved for specific domains. Only users in that domain or its subdomain may create guests in that zone.
- Dedicated Hosts and HA Hosts: if one of the dedicated hosts fail then the VMs are HAed onto a specific host(s) that is dedicated for purposes of HA.
- Domains/Accounts cannot have private pod, private cluster or private host
...
Dedicating a zone might be very expensive offering for several end-users whereas dedicating a pod/cluster/host may be more economical. This feature will allow root dmin admin to dedicate resources to a specific domain/account that needs private infrastructure for additional security or performance guarantees.
...
- Dedicated resources can only be used if service offering dedication flag is ON.
- If resources are exhausted within a domain, VM deployment should fail if the Implicit dedication flag is ONOFF.
Configuration
- global configuration parameter addition: implicit.dedication.enable, default value for this is falseON.
User Permissions
- Only Root Admin will have the privilege to dedicate pod, cluster or host to specific domain or an account.
- If a user does not belong to a domain which has dedicated resources, he cannot access the pod, cluster or host dedicated to that domain/account.
- Users belonging to domain/account having dedicated resources, can access them but should not be allowed to modify.
- At this time, there is no requirement for the domain/sub-domain admins to manage the resource - the root admin will remain the owner of the resources
- Only Root Admin can add a service offering with "isdedicated" option enabled.
- Only Root Admin can change the global parameter: implicit.dedication.enable
...
- host_pod_ref table: Introduce two columns “domain_id” and "account_id". Default value for both should be null.
- cluster table: Introduce two columns “domain_id” and "account_id". Default value for both should be null.
- host table: Introduce two columns “domain_id” and "account_id". Default value for both should be null.
- service_offering table: Introduce a column “isdedicated” in service_offering table. Default value should be 0.
...