Versions Compared

Key

  • This line was added.
  • This line was removed.
  • Formatting was changed.

...

Dedicating pod, cluster or host to a specific domain/account means that the domain/account will have sole access to the dedicated pod, cluster or hosts such that scalability, security and manageability within a domain/account can be improved. The resources which belong to that tenant, will be placed into that dedicated pod, cluster or host.

...

  • Currently in CloudStack, zones can be reserved for specific domains. Only users in that domain or its subdomain may create guests in that zone. 
  • Dedicated Hosts and HA Hosts:  if one of the dedicated hosts fail then the VMs are HAed onto a specific host(s) that is dedicated for purposes of HA.
  • Domains/Accounts cannot have private pod, private cluster or private host

...

Dedicating a zone might be very expensive offering for several end-users whereas dedicating a pod/cluster/host may be more economical. This feature will allow root dmin admin to dedicate resources to a specific domain/account  that needs private infrastructure for additional security or performance guarantees.

...

  1. Dedicated resources can only be used if service offering dedication flag is ON.
  2. If resources are exhausted within a domain, VM deployment should fail if the Implicit dedication flag is ONOFF.

Configuration

  1. global configuration parameter addition: implicit.dedication.enable, default value for this is falseON.

User Permissions

  1. Only Root Admin will have the privilege to dedicate pod, cluster or host to specific domain or an account.
  2. If a user does not belong to a domain which has dedicated resources, he cannot access the pod, cluster or host dedicated to that domain/account.
  3. Users belonging to domain/account having dedicated resources, can access them but should not be allowed to modify.
  4. At this time, there is no requirement for the domain/sub-domain admins to manage the resource - the root admin will remain the owner of the resources
  5. Only Root Admin can add a service offering with "isdedicated" option enabled. 
  6. Only Root Admin can change the global parameter:  implicit.dedication.enable

...

  1.  host_pod_ref table: Introduce two columns “domain_id” and "account_id". Default value for both should be null.
  2.  cluster table:  Introduce two columns “domain_id” and "account_id". Default value for both should be null.
  3.  host table:  Introduce two columns “domain_id” and "account_id". Default value for both should be null.
  4. service_offering table: Introduce a column “isdedicated” in  service_offering table. Default value should be 0.

...