Feature #2742

Control system DS deployment with ACL rules

Added by Carlos Martín over 7 years ago. Updated about 6 years ago.

Status:ClosedStart date:02/20/2014
Priority:SponsoredDue date:
Assignee:Carlos Martín% Done:

90%

Category:Scheduler
Target version:Release 4.14
Resolution:fixed Pull request:

Description

The scheduler uses HOST MANAGE to filter the hosts, but it does not filter the system DS.
Requested in the mailing list:
http://lists.opennebula.org/pipermail/users-opennebula.org/2014-February/026627.html


Related issues

Duplicated by Feature #3751: Enforce system DS to VDCs assigment Closed 04/15/2015

Associated revisions

Revision 3f0a7fc0
Added by Ruben S. Montero about 6 years ago

feature #2742: Enforce System DS Access Rights to deploy VMs

Revision f5e507fe
Added by Ruben S. Montero about 6 years ago

feature #2742: Enforce System DS Access Rights to deploy VMs

(cherry picked from commit 3f0a7fc0cd276ce778e269837855949735021564)

Revision cff12735
Added by Carlos Martín about 6 years ago

Feature #2742: Add empty onedb migrator file

History

#1 Updated by Ruben S. Montero about 6 years ago

  • Tracker changed from Backlog to Feature
  • Status changed from Pending to Assigned
  • Assignee set to Ruben S. Montero
  • Target version set to Release 4.14

#2 Updated by Ruben S. Montero about 6 years ago

  • Duplicated by Feature #3751: Enforce system DS to VDCs assigment added

#3 Updated by Ruben S. Montero about 6 years ago

  • Priority changed from Normal to Sponsored

#4 Updated by Ruben S. Montero about 6 years ago

  • % Done changed from 0 to 90
  • Resolution set to fixed

Needs to include comment on release notes:

"The scheduler (and oned) has been update to enforce access rights on system datastores. For versions < 4.12 only compatibility with the selected host is checked. This new version also checks that the user can access the System DS. This is useful to implement different allocation policies and VDC-based provision schemes. This may require to update system DS rights in current installations"

Alternatively we can add other+use to system DS; which is close to current behavior.

#5 Updated by Ruben S. Montero about 6 years ago

  • Assignee changed from Ruben S. Montero to Carlos Martín

#6 Updated by Ruben S. Montero about 6 years ago

  • Status changed from Assigned to Closed

Also available in: Atom PDF