From 719f82003df3d1ae9e0d85382b3d2c2ca763cb0f Mon Sep 17 00:00:00 2001 From: Jessica Date: Wed, 28 Aug 2013 00:18:25 -0700 Subject: [PATCH] CLOUDSTACK-818. DOC. Add how-to for Dedicate pod, cluster, and host to an account or domain. (cherry picked from commit 141e3b181e700708c38093f46bdc0b421f0e836a) Signed-off-by: animesh --- docs/en-US/accounts-users-domains.xml | 79 +++++++++++++++--- .../en-US/images/dedicate-resource-button.png | Bin 0 -> 7144 bytes 2 files changed, 67 insertions(+), 12 deletions(-) create mode 100644 docs/en-US/images/dedicate-resource-button.png diff --git a/docs/en-US/accounts-users-domains.xml b/docs/en-US/accounts-users-domains.xml index 34372a7871c..e8b08a78ee9 100644 --- a/docs/en-US/accounts-users-domains.xml +++ b/docs/en-US/accounts-users-domains.xml @@ -51,12 +51,14 @@ Resources belong to the account, not individual users in that account. For example, billing, resource limits, and so on are maintained by the account, not the users. A user can operate on any resource in the account provided the user has privileges for that operation. - The privileges are determined by the role. + The privileges are determined by the role. + A root administrator can change the ownership of any virtual machine, network, + data disk, snapshot, template, or ISO from one account to any other account. A domain or + sub-domain administrator can do the same for items within the domain from one account to + any other account in the domain. -
+
Dedicating Resources to Accounts and Domains - You can dedicate infrastructure resources including zones, pods, clusters, or hosts to an account or domain. - The root administrator can dedicate resources to a specific domain or account that needs private infrastructure for additional security or performance guarantees. A zone, pod, cluster, or host can be reserved by the root administrator for a specific domain or account. @@ -65,14 +67,67 @@ There are several types of dedication available: - To explicitly dedicate a resource, use the explicit-dedicated type of Affinity Group. - For example, when creating a new VM, an end user can choose to place it on dedicated infrastructure. - See . - You can also use strict implicit dedication. - Strict Implicit dedication, when requested, means, a host will not be shared across multiple accounts – as an example, here is a reason: - for deployment of certain types of applications, such as desktops, due to licensing reasons, no host can be shared between different accounts. - You can also implicitly dedicate a resource with "preferred" implicit dedication. This means that the resource will be deployed - in dedicated infrastructure if possible. Otherwise, the resource can be deployed in shared infrastructure. + Explicit dedication. A zone, pod, cluster, or host is dedicated to an account or + domain by the root administrator during initial deployment and + configuration. + Strict implicit dedication. A host will not be shared across multiple accounts. For example, + strict implicit dedication is useful for deployment of certain types of + applications, such as desktops, where no host can be shared + between different accounts without violating the desktop software's terms of license. + Preferred implicit dedication. The VM will be deployed in dedicated infrastructure if + possible. Otherwise, the VM can be deployed in shared + infrastructure. +
+ How to Dedicate a Zone, Cluster, Pod, or Host to an Account or Domain + For explicit dedication: When deploying a new zone, pod, cluster, or host, the + root administrator can click the Dedicated checkbox, then choose a domain or account + to own the resource. + To explicitly dedicate an existing zone, pod, cluster, or host: log in as the root admin, + find the resource in the UI, and click the Dedicate button. + + + + + dedicate-resource-button.png: button to dedicate a zone, pod, cluster, or host + + + For implicit dedication: The administrator creates a compute service offering and + in the Deployment Planner field, chooses ImplicitDedicationPlanner. Then in Planner + Mode, the administrator specifies either Strict or Preferred, depending on whether + it is permissible to allow some use of shared resources when dedicated resources are + not available. Whenever a user creates a VM based on this service offering, it is + allocated on one of the dedicated hosts. +
+
+ How to Use Dedicated Hosts + To use an explicitly dedicated host, use the explicit-dedicated type of affinity + group (see ). For example, when creating a new VM, + an end user can choose to place it on dedicated infrastructure. This operation will + succeed only if some infrastructure has already been assigned as dedicated to the + user's account or domain. +
+
+ Behavior of Dedicated Hosts, Clusters, Pods, and Zones + The administrator can live migrate VMs away from dedicated hosts if desired, whether the destination + is a host reserved for a different account/domain or a host that is shared (not dedicated to any particular account or domain). + &PRODUCT; will generate an alert, but the operation is allowed. + Dedicated hosts can be used in conjunction with host tags. If both a host tag and dedication are requested, + the VM will be placed only on a host that meets both requirements. If there is no dedicated resource available + to that user that also has the host tag requested by the user, then the VM will not deploy. + If you delete an account or domain, any hosts, clusters, pods, and zones that were + dedicated to it are freed up. They will now be available to be shared by any account + or domain, or the administrator may choose to re-dedicate them to a different + account or domain. + System VMs and virtual routers affect the behavior of host dedication. + System VMs and virtual routers are owned by the &PRODUCT; system account, + and they can be deployed on any host. They do not adhere to explicit dedication. + The presence of system vms and virtual routers on a host makes it unsuitable for strict implicit dedication. + The host can not be used for strict implicit dedication, + because the host already has VMs of a specific account (the default system account). + However, a host with system VMs or virtual routers can be used + for preferred implicit dedication. + +
diff --git a/docs/en-US/images/dedicate-resource-button.png b/docs/en-US/images/dedicate-resource-button.png new file mode 100644 index 0000000000000000000000000000000000000000..0ac38e00eca6e455e8bc71acc3aa760b0e5a67af GIT binary patch literal 7144 zcmVP)4Tx09b{!SqD&*%afmPBfIR9bIv*EAUR2roKaYov}DO38AJgUOo)IYNko!h z01*+8Ac`PCKrjG`3Zh~_LDGGo@4f$}y1J^nshXW%_4M?F?&<0N76A4oQdn3Jf)0S- zkjQXb6Ma5s7gs*)3xEL3fEFkKW)e9fOwZcd0{pk-$2fp?+EM8pS^quXe_80geIm#J zK-Mt!@{S+}!}taO2z_!`cq9PGRha%HCNd1hs0T1+3Wpa6AoF!Ct!5w<8vs-U5-Hpd0HP2~=Zhx$!E%U(0ALtGyeT07Fgn9no9s{W27tW)=8*~x4&A}s zFc$Or7dd|aPNvu2GD#%Azwz(A>=r6RN<>%?DeixH9RG6(4vP9~4hFaqLW1_~=!ONZ z@4ZQe=5Wge*R8OiU7f)^5Qk5QgWVr272>te>JQfT4L7#^Jr=SKi`3u2@ctm*ut;nB zKlG${e}jEH^T7CwPlVB5axMjs%yx7}1LLOfC|d^@!)E|>L`2&e!5FqE=uN!8z0)6_ z@7_L!f9ME=FU8pO4`!f5n(oZS1Y?1~P;=Ygb0JiKIS2wiAPR)Tzac;xSO5cH_~%y| z_yQ8#6Akx8fI#pT#=-E2PdMR-us{+Z!lG~qsVc$IH zKCzKI24oN#78g$O^N-}ygKw^n6rX7bSw@OaK~7%r|J-i>Kg*8K`i;KX?)oB#W#}Io zWgGyNMwmGH56us@xz;%Va2Eg2gll0_g?+*U962gH`ZsOIod7hz!@iISumc_-2*luX zRsbqM6X*gXU|ffCP{VGC>Z=17|@YC;{c*3aA53pc%A*PS6V; zfhXW8mzpadu# z%7IQng-|I}4K+fyp-!kD8it-hv(N(c75arhA_xd31UEtiA&XE$=poDz_K5umKg2;q zJR$>e0#Se{L)0Q}AvzI{5Kj>^h!2PrBtTLlS&;llX`~v`0BMDEMfxJckx9sGWInPC zS&wW*_8~`+Gsq?68VZAAMDd}dVLRQ6azK$$2T@6=W2i#Z71S+MH)<3$i&{o)p^0cN zv?N*sZHjhA`=Mjdndp4<^rYx(}5Yr zyvD3xu~>GjBvuP+g(YDlv6K)ZOjt(b`)4*Bbym4{3TwDdN6*q*N$F1Y(@uGMwygfbupNcQQ*W-Ke&+*@=si_61 z)v0Z$Dby*{1=QE5A5hOyuMrps5(EQ+J0Xg2f>1^1AUq>{BNB-sL|vjQF_L(KSWUc7 zd`VoTVWg3vF{SaQNv0{HxkWQV^NAKmD@?0Ldw@2cHlOx7?GWt}9ga?f&VY_Ymqb@Y zcbjg4ZiSwaUY_2HKA8R({Z;yY`u7Z21`!4$25*K8hH{4c46hlHjDm~?jAX`i#tOzB z#(5?TlPHrZQvg#AQytSF(=syyvl6o-b1ZWa^Ihf{79@)Ziz!PGOD;jI(z4gzTc4FWF&@q%iCzJg~2 zy9Aeoc!ey55`=1mri5|AYQp})=Y;!&e~O5TIEfq)X%=}e$|hf6{D}lYLRrFJqDW#$5+SJ~Ns+uDIV^>iQkM#mDwCR!CP?c^M@!d8 z&&sgKSjeQwG|POF6_Rz8Jt^BKyCtVA7bI69H!aT~Zzi86-zxuAK|+D7P^2)XNK`ad zOjc}B{GueOS%R+ z^W!-mr;(7skwR)fQ<@Ce#Z|eUv&@f0e=rBYYniysq4jM5SIT#fhy)+gu z_A{MYu()CBo9o z^0ejieZu=f_BC4pD^sh}RxhkYtq)q?vBB6_+Z5TnwUxI`u7FVpRqw8hY6*nWdvu^Y5%I=x& znC0VM%H1FZt90=I*lf*OLUf<1$8 zhcJW$hIEJWgvN#rhe?KIhRqz*IC%Epa=3Z;_jIT9)(q~9l#JJhO%B&&(qx8bP8`uZQgRe^lyY=1OEK$w)>gK6 z_QM>xocx@PW8`BGkINq~IKF+t_rzeXO76uxOkPOd_(`3US5DENia+)GwB_krXZX%! zpZR{)<7|JvQhv!f{JE%eGX)j}E$4;K=bhgu^e=o`q+irf%vGFK{PTkMg^`Q87wb#7 zOL9tnU7}o?EHx>;RVGrFUydn{E`M9$SkYIhR#|9nJczex~o;ItFLlh z&8bkCWz5a&qjpCb(H?wa+ zx8iOsH~Tlww79ek-!{A5)vDQg^N!4&sy6<%qPxs@bKCLl8SUHm;_t0=gmo-+`gOkU z^5~kr?|gr(+opT4$Gqo3uW|4FKE1ws540Y%^=tIseyH}a`H{+_TLa1iHybJMTMuRpwrc(XB|@s{{D{~hnU>h}uo z+ZK!$o-Dd8&VLB|u)dV}k^W=xC$UdAKI?uSSax2X{}TRX`|Gi9?BA-sD}C=;v0i!k zBlySq&+Jw9)hlaiYkj|*e!W|d*}!fTY>IETZkcaA-wxj14kLw=c0&OqToJy$0DP^2 z<9!!6cX$E-p5}K>@uwi+-~$1-j*txW0nv?&KnbH3(WMv{g#py6~bM!q7ml?B|LYW;|j98u6g4r`UE^)SUjc_mV;`oI4^#nWx6NQR|Z;MQc z{u1Yu(3bR)N|&yd8It`b&!(WGNLI>GZd4go{iIIRkkB;VvL`sOI&wMjIt#jpx=OhzxNGb;IAHGK z;7KNhdL@yMdzbh$`u6xu`7Z}h1@Z-{2it{&hGvIV9_$Q%8L=M47Ofm(AA2w^FTUZ> zP{QXVx@5%^ht$}#;`Gjpx0!?^ibq|u(z2^_MvrZr5XrU5i#u6y>hbB%XKC~0&p8yt zo-Z!!EP8i=cu~2;{Ze}A)w1F8pOsvf^{RZX9I3u?wXfz)?RGs|gWNTfM)#)h>sdE0 z-n@3Jt@(aS@9q1ocka}+72Zv4C*RZUVC`7!yxo<0-=rJY{jevqSFd-y@5Y0`eu4g} zhbJFd3=jr}ALkFc4)F}lJ*gP>9T6K@7`-|c@KoaIhw++;z)7jekIx#W4o)jguRd>k zk^0j374g;BOyTT-If1!_*EioBnfG|B^-l0T-2!?M@d3ZY`BC+g+vg+8tzW)>Q~Dme z(*6^>YO_}S>+OcjX4F>e_V%v+1)*yQ7bHEh3FU^yqw6rva8%PkMZ&S+9^o^n^$BRg zed1vnQ(79@NxCxnAO=-NEaMBN0p?zo4%WMDE$r7hu5s3KRdHAFl=GJJmGPGflnGV{ zRS8#%)QL8V-4Jh;=#=b{dMG_2Gb#H*?xp+-h3AS>N)yUYRYp~Z)E=t$Xmo1c*>gjy zPP;;7i+1X$RB7(<0I$Q=?L%Q(}^1ljD-&6AvXMBqSb6icgM9iG{5rH@z~W?eJLUhoi_W zj%Ur#H^h=Zl`xDzG{4TbNLEvbf?x>&2mx*Oz{l5z6^1 zR4UCbAE*k4Eu`pbeNAWWSlzq&U)KnYJWaCK^={bSB;Sf?&S*JvyAt+b-EE_HU$-yb zd(u(Yncd}g->{pnd!uKv_j=!n2b6w;hujZ;JQ^CPdYnAyI3)c9^<-+eaU^rpeN6r- z`sws|<3#o(<(c`E!Zh!5#uv0N8DH_wXwG`hoqjzwFZTA>d$5r8L15|er>te0uVUY+ zS5|+1URzxMxcO~Y|B|2^GKVG+ZitV_K;$Ya4b6rw!zg1O!4d5yRS`}bH-kSytw8;X zkVD)*F%4T!Glqr3B@$VT*(s4YRSgSw!;39qm(n2%Zgi!2jZFHz0Q}* zA0S{XC@8oE$5AaJ`J$0x*5YE~8xq5kl~QrimNNV@Ut~MwPRe^K$SABScESF^PK8Zn zTD3%tq%NR7t5KqPU=Qb>39ZxGRystT5#2&Pvc8o5H-kHd8AcYyOvckD<*>g{FkLh2 zFh62pWyu1^6J=HuYZ>eBHm$bFc1HGi`$313j`mKhPE*boUA$byTtB(pa!=WBc7Wx; z8#oTgAUSzSkrCu6?;AdOzQKOx{*n}G%Ey2wfj5HkgJVLRLp8!U!!{4T3h#_4kIams zL|ewl$Fjt($IZn*Jk*p>lz2EPEZIH9G*u-{Fr6U-%J_2lZRY%ug`=OczGnZ(`E_jT z1R@uchdW6;MR%I%4C`5re4cas1w!XV3nhxAi{&pUT~sa6yrf;KS7u&Lu1Kvcx!hhg zb!GJ`ON~;kOjT@{t6>nKJ2ecf%UE11qXT0r8JK>&4hi>Qou0!|F zb=UXw_P*%*-cS2b_L0ND;m7Smm?s{?eWT`MbK}L6F;nr+FTcXg*1kFSZumpg=iKkQ zYqdN2|NU)gr(je7sMLWS0{m{+l>t!R2IrY-@cU5-fHe^Sdv$=Yj|b4p767@N|NH%b z;KY*((7_p}Fi_mh@B={_oJ-yW!{9SS3&}(FP&}LiK7>{foCtkH0OB;F9kGaHLz*CC zkk!cNC_0oeDiO}fmf<|iAI`nzF~S&sObzBURvDX!?WLlla;K`M`ia|%E5?1ro8rsx zo7AqJ)B8YeUZ_n2u( zXcM$Q>5S^O=v~s!GKe(vG_o`{Fwx$tZmMJ^Z!TvcXDPo=!Aiwi(?-wM)XvV{!y(u) z(J9Zl(xuIH!fjyVqB5F(0z;CBIh`o&a)ST`&l73%z$xI=nJcBI-_z zOB^QtenMVSP>Oq+TZUg|#?jjB7suIh9ZwdW9yz;Oz*lHhoO!Xkl&ajOvaIUoRlC}z z2Ij_u>#uKFwcNQQe)oI_zAK@7r7x*}d*I;U$gtoj>1pmn?X%m{H(r#zN}08P&GY8f z+rsx&3)>%RKRSO#E!Tf_{*GE{{7G74`qjUYzNNS8KOlex)PM=_0a>62Yd;tq0p*|* z%t2^K60(I7;Ou__fkDW_xqS|z6|scmMcN~Ckln~Flm;pW)r?w2Yoe3UJs2X!5mN?h zT?>00J42;Jl|?m+)5M*}t>NA99n_-KxzxW1{)9=Q8L^#4g{Fa4infMMny!gngT9-= zhGCX5f{BW$lvxwjb}XD>K46Px7iOR2IL>Lrxy5ydJDx|AXN$L+?-;+MfS|w^!TUn_ z!hs?NqTHgt#GZ-Yk+>)sBV{EmA%m59FWWCyFMmcMQIVqLq->(1t}3G@qRywmrOB~} zQ;SzySVvk{RnJi0-oV!|-YC~N&*aSB0@I6TRpyNr?Un=kURZsxLECcKsoL8(ggNFp zH93#FY`TfM+w4z1(BLskV)im8ANIcIv+k$qpFp`6hzha@J{vL{CU-D3d^A!FevzhQ zRpavGR}o6 zj}$@rAg>^oP>QGo)B`jN+82ErLxb_b+{1EW}p8I_u@=cNqLIk}~!;xw`kGnWA~3MgKlFs{reETPC|;`#wh@r!?nTR|B`o{kQ|6 z9^)i!uWD}=pLE}E{yvnxK>nb_;OWpkVWr{Nh|tLCXw#V1IO+KE1kS|#WX6=!Y0T+` zhXpcgkE&+%<~SZ(Jdu*eezNJb-kCf3%IBKS%N1TPR=LntVsPnknQQq%WqcL!O8HgI zn(?}b28L_bo1Ct1-Mrjv-LlzQ*LI+t;a-1d+WkG<-+OBx1U*z4fF2JHT^Oc}Dvqs; z*H7-BLQNOH5P4ZK!#W!?H}HmS-ui9&yUO?X79K4QeR!~R_had&%+JotV$0vZG=2^F zCj9Nm_d_c}D|df5{#gE*x{6ypxyG?p^o!wF_Bym4w?4mNxp8xod-L$-!j|4v;nufp z%k9fM`j7BcRM>q!Ac8&s=$G5u-$Vewo&sR=%4gdfE32;bRa{vGf6951U69E94oEQKA1W`#uK~z|U z#aC-@Q%4XzGrRXX@wF2Nw@DlowFIQ_ttb@@@Z+JC8U$2Dr4`Utr2PQRix433>ppf) zKU~KF8hkBL%8|8N-Sy6ynVp@Pm1o;K_!RIrzu(;a?&g&%Uthd*>EWZts!mn@a~hHW zR5eZ0L7J^}I{w1y>TkdP(wc8AE-rO@1639In8aCnbktp3{M<**)f@HNOs$bLTCLXq zK-}vMoI0On+3C8-==U~42$SVbtF8zjAW8aCoi}l&+)9~eZhU9;gn$4%jq)$Nvn|WA zBF`ZL0s@eybHIBS$F*v6fst?$q%Zj=U@#cmxpVvePxqa7LIFTfAp|HS?c(aCjg5_^ zggA~tm>C41sEUzh*6(#+930%eclX-HwWZ}wDSCqGBVy7f6RT(xMc(^3 zidlxqiI+d&G?Hdkdh(6Y2#89(UT?QQ z+u7Z|z4^oQ{XG#enzBrsLkY?Z% z!Bw)A{u%$3<$i$>B;YiP;%2icfci<11(dgG8e*PWS?Wuov(j0;@MZV7`{c=!Uazkr z6sWpdZ6=Q6DuE=amBBUgFGi`SJlbYbUs>*)KmP?p$_0Z#0LT>glO%mn6cxOb6Ml+_ zsM5mW;men=k6s)cbh}+ur>Y?kWVIPUU||g2tb%w9Rc+4Akr)mJNuvQEilT-2g)GmL zq&^r7kB^TqMWrw^n)%A>1dQ@)tv37Z)vNV-y+0VxEEwnJ=dWGgh@!}7&z}DM;O7S* zCZ{c6R56s5N|xn7Bui65@}dw3)S;}Rsshj$EaV|Sqr#lc4PTWpfl)=X*GI2z-MSg_ zBFnR{F08Jtt-U;a_2}`#Uawz^<1|b2EEkn21OkAs)Udq0A%tMIwYAmnb&D*I<9Kat zElr1iJpO%<4n%dX*=#oFXynA4HO8c*`lgDiu09j#IZcuTV58XpkTjBZyPbvHd+(g{ zK6pY zU}n3!y9dt?LI@B^l7uuFHEWU=1*$6JRK#Tr8yP|t}ghea4e3c8N4ii=rsg^~s1gCgZt~tZc$Z#7R;gmvntkdrP7yrV=;O z;yvby$oL3!fBzuMQnR3{l{x3bL9#y>42MJi=hk0I(uks3*_M9nx07@3+0$)M