From 23b447be7189393a63871038c87177a0b24e8427 Mon Sep 17 00:00:00 2001 From: Dylan Whyte Date: Fri, 29 Jan 2021 08:54:40 +0100 Subject: [PATCH] resource-pools: add section in docs Adds a second-level heading for resource pools and adds creation of pool to example. Signed-off-by: Dylan Whyte --- .../screenshot/gui-datacenter-pool-window.png | Bin 0 -> 8591 bytes pveum.adoc | 40 ++++++++++++------ 2 files changed, 26 insertions(+), 14 deletions(-) create mode 100644 images/screenshot/gui-datacenter-pool-window.png diff --git a/images/screenshot/gui-datacenter-pool-window.png b/images/screenshot/gui-datacenter-pool-window.png new file mode 100644 index 0000000000000000000000000000000000000000..60fdaacb4947cb08d6dad8ca7a1abe873c2a2e44 GIT binary patch literal 8591 zcmbVy1z1#3yY&Dfpp*qTv?z@<(nxogfOK~bT}mpY(v2V;1JYdr(!w~@&>hm0q?|opHGy9yq_dENncdfPG!v_^5X}o*Tdk_c&PgX`k4FW-92FJ5J+G!1abkI0@ooB7#jq#X#|1rCqW>@ zPH7FQg5bnm6M1O~$nD>stmgb!(1PP6qvHyJ5EcA=p_!|8?SV!tH(5nVtQ9meTv{%v z_l}34iO|$o$sG(J2?8jGK+vPW>;6{IYfBJ-kgSBLhUe7wjF0DIX0T%TI)2T){&~OhU2n&@XKd#p>{In5lzNpZ@ufK%4kAw(}C-CsheK zDe4{$Rwtg;$AMbygW(^JaxFEeW^%6JHq9=S351I&y$s(gZj5*~Rv&uT;8W3##uQ{( zK+GP;xiD8I#c>j4i#I);&E;FTF^JN=h21ZyaimfMDPXClm$fa zbP!m|dzyLiGsFrIPAjxnGD!Hje6)MMBP5SvqukkkEXCQm5|cdYA}~ib_=07;FA1f` z%~%D6$&s8+TA!pdmAc-_avp+_A-~5Eu4Bq z%JFx;YPA-xgX0e4I5(61q<=Q^wqwap7rop~Sr}vL(&Qfd?>9SD^=ava#GcuXY^Uz` zOm|i_@Xa1`dny!ER4lfo;Lj&}dC&8kC7}uuu{p^f7#G=b7i)}Lgz*X6 z{#Ir1rRN^p5>@GY`I=;i(&z+-jzL1kNhJ|`=%VbX<>`OWis{N6%KYZ#P z5v0S0TNV!%L*1DV(b+%y4~^S*;tGxlg#TzhPpge{omEp>ob{#HB9}mwM>Llu$%sUo z8(8hRLuWd5VG|t&IwZ)Q z+TiN=t5((C>9>j1tgPQksLV9+xrcT}hz~_=Li%so$yH~$S8H*2=2bo!GqkRn6Nz03 zM&UDyupw*s#{&N>)}|kG13@W)|%Qleyp53->#Rd)w1;YkLm7f z5NnEq_)FiXepXeH>sciZb5Tm|*SQfFezbcJZ62|E_!LQ3*Zta8N|XUy#O*0C?u*Mb z+RBK*d5`r(MQM4m%nM@!2F;_w0KX&eLUoN-)^cfnpn^192Q$=kTcY%CP)oL?c2vi7 z=JK4VU$)#n;bP$zT@n{A%!iBR%DN6n$Yl~L$ohd%mSo^N_FAmiDtKVkbVSc`#ej*) zGg4uLne{eC1`nq(HRs8I7f5HpJugM1UMp zT1l+*geN~p$5>|kN*MKvlkpQEJGuVi=!F?;V$YJ(E~a1z$dJ2>9{HMh-xCv1vV5jr zEj5gSY7y(|9g1`xC*2kgFxCSo#@>fH;2BxJeazX?yEsIk{$cOXY*lD*GN2`{uRqch z3wkU#!51iE*K1}UM<7r6!KAmvH`M)T>1FKju+5MBTe>^8^+C>t7EbM}S+FcR_$}l6 zIutr&9nqJ1F0Qw?v-8$q+9|`ykRTLxv=-uTEV7Guv`C8(>dTDd4Dog4N_;T$%rkp; zg*6SJF-fdw)ep3-6Yfg+!Btx1>4WQN%X+k3pO*&{jt}4+u2@q47!>z6kivFG#L63s zVb@Z>dlBqJ`tZ&F|KU((;{M6W4d2!Sv2a5LSy>z^A)rE}pZ{5f{T!pt^I3TRe^I=;qBie^ z5aJ|}0Aaa8C}M3mQ&~>#WAWB=Xrbd=%X3=V8vC+U5xs0mYpx&0?)cDEB=>Lqj<^xg;KYD7@u@kwv%438vQ&r7V0NJZ>039@O6U ziCWy|C~i1YWcYAcWO$)7Y-H7q%%009zI-7ln6|&vv$VTAoXlw{qo~+r#r55&9evh&i$y7&U-EEuP^Z!Y zZ+3PTHrC$R83e9MLbU4GsFnnX*}*U7`56 zxNmW4jO^^H%?Eu{%(7RfsA8NkLz4eA%6K*1ze&TLByi=cbI3-#Owiv>dXAEFABRNh>PF9 zM}I;_R?>2@$pq%Jwzg(uV^bmL*U*e!U$?4;ZE2bFq-wr?9XQqGRSCk2jKqCHM3h(K zFthpAVg1+FK8IS+?_)%S`mo?(B)C8}mbNgOT%agB``L;Uug30dvu3TsOdK$N_+jF( zjZsM!!bkZQ+>3UbBzQ+uh-)3v9w8*?aL5?98q8$+Vs_Ehcky$iU zSS`!dDdKxvuWUKLclGmzualuKR7@)+M93x_U+re6YsCBW*F z1w3}Xf%Q4sMBWd4KqJNLlW$R(?AUspkZ9=tR1vYazi-?Tj8pQa0=?Nl+1FQ)NxSS0 z6%9>LT-@WurKQOhKY{l4cEPK?P6z;S=;dzfT)ka20Qw^eiXo5-fkm?idkdX9t^Uof z$*MV0UlE$y2{h8tWijp06a9=v3x)`>+t*7ZnvPa}cRD(y7$6D7C-3VBxqrSG!AinoNAm97J2P|h&!0cP>os#}ftQp- z*45QPQN2S$?svO#QA0m}ImU$j>ir2^&8#YHbz6{=ZzWwL`_iudH{x@+6G=BfHgQkYR~!}D(*CF zy-pINaD8D%GvVF<^P=v;9q4o`9-T#xBkNPA?z36Wppo%>!{`E zQ-a2oUE^d0+5~2u(RBkPt0pV^ zD~%#-Q@(}$r-R53ens!~JF)ITuRWevIIXgSEumN)`G0c)#lf$#FtG6J8nDHdSi;#|vPLw}URso0Ws)G0NrskGt z_2QJZo6)2l&);EbVg%KeHX3T@`~`qz@buIu{hpoup0)MrOOA9*cHA>&=14$z51`P# z@85kxD8wQ|@1Qxx}m>2>;%N-qJFW=U+C9#{bB`XZ13lK+ibpR|SahTtm^S@-l#Kcrc z;p#Ji_!t3UIjnDszHzkkV zY5w)B*BZI6uP=#!J2QYaVCdNRcu6lWKFWYAcE5`wYHI3tV7X09Oh86a{_N{pga=$R zfjP*8eMvykGAb z=-z6o<3mbH!<;{=s;UYZg2^m;HAXzCA0i{oHb!%U!@|^cb^CVxPX&Nje^mQeV~_f7 zHS)}%euW4^^z!XbK;;#v?X&Z9_JA8-KtAi6`t98RZgIYXT+E|YO!?N=-@m2raJ-4! zR1Ua^b*%@!uh8po6*vw#1qBUw)4@kZ7M8!t-n`#UYBQ9^*Jn}55Z3wCVmPDpWM>Ao zZa(LCs{hvl0ha>|q&lEKO#$~mPGyz=yhQ~CGC=+T{E;Zf*3vk&&7YrXHdhi2-4ldp zXvA}KbGhpjQ&O%kPsasXwc!SvodhB!>@3{enrMu#Ue(T?y6;TuGy_Qob^-XhTrqKR z*4ob#K57Ai0nL_eCHAO`wK=t5RKst}l+&BZyhG08kitdEfXQ zBelUez+h+?8D;Uit$zY;=HERKa3+B4Y(U81ioU+S-!mR_r4|E8UqQ$p=rUBm%4=9u z>VTPmdcpZUc1pkr;CQtS3=B2_S~TPsj)814Qc_aFuFjmnaKl2UX(_zUCe5${gP8pM z{Hbc&L@*zK8hucEmYlr2rle#Dx`vI-ra6j*pI;XbShC4&chD06U^Ce=LsgD}8)PC3 z3{)^Wss>K9-d^u&w)$Vk0UL^{Q49$SE9SHuqR)++`feU^aC)lk<>j>r;D1l$$&)AJ z*24`oWmTC5Mf~}os-&r=_P(~Z_K-RSHrW~=@|W3HE>3rqb#+q?!|M29o53Si5(utm z&z^wa{wTC~`NRtS8bE$B*Xj~sz2F5dKA56OrFKlhyZ@bUh z)TV9d7ozqNY(~}|HF9!r$jHi43kzrb^;2YI0{{%TuYu&$-QHZL_iObJ4w?fF28r+# z!ph2;;d>xE1~=S&yV`QOB- zsz7UEYWl7S3!ade7@M3tnRP1FD|~s$9Dl9B;j|Xzfb&fIfAvtXrkQs&fUA< zgrtK3u#Cc>Nj@=t_7sdi@$cKJKl5 zy}Wg?37OyB-Aywf7e?+jf5}XMH`q;1PF8Pf3JD1aqyl~zdo!%O<;MvW0O)N~bMs`i zEirJgW$e52?Loj9?iU+ge+&$StVQDz2NiisH;kcUV4#60?+ObGj~8D%FanZ%t%(hY z3gc69@`l|m5sNOH?HIFEG?~s;bE$6ivw!k%$^cV*o_j{ksOa!;ND=gpJY zc=3*6dzX{_AI#v3%{|xaDqo~|M0j|?gV*)-^$-ausj(D~dha;}sGr>W!h-1Aw`70q z4-m}9L_}&@THP5!K4+J6w>wu%qrg`!2^9xo#Y`%ldIi3(F+un!+P2iXdw1-lq| zudO?Z^nBYfU@J|;`^ZZ8Vx0y^^tNC;P+_X%~^fq(&l5J-Rx7Nqs&7+#@U3ij?;xsQSIk0gDyLtHu#t1K+5ruLB2 zV&FA{q??;t6jL(n!^e-$fKA^(yve4bj>~ z;`(m<q0 zMc{fpV5%?s%{VH|dLLTC<+vO~;`3L-NuzBRV-g)VS6s3F!;m^)BTa=Bi^>c3Q;oNg$zj)z}iQ%k6?p#Am~s{~JHB!Pup01pc9IeAriX#xq z6Xf@7>(eLb#nZ9Us*JCpqoFQ(K~|se3Ughukm7K}9{c*_Ctck&j?vI#TN%>#k;WhH z($_Na{VID6M{EiqV|kjsGgVW|7~xP)hu=vc?6CjGVd(T2RSKvj3n|Y%P`c&0xkGYn z_C&jU!HOEE*NayJ`KCwOxwd@M2rV^+82uORj|fbHl%xuVpn%NQ{eXAhl;a2jynacn zyf76xe-ZENN1thac~EwKa>O6izI{FEGQIfaLeA&|ZLd0f|3;klpyY{yzH7=r_Pwbv zsMmRhj4meB(-c*&yNh$YKcBuZ($q|In1@|#v&ORWgGC zgiuYP%1OOp=OHzvt=AX`tQsm%=>BpKYxjmGg3I;kVOVYVoc!=5Sd6BNBN#jtEH`bT zw7jExI-`52W;OVR_?Gdbjqx$ADPj1tP-xeVde;!fzQvgE@1NVHe!NMV$o{l5kp(O0 z54vv$1KRl{D5kiRuTto#8(!HS^vch3AJj6(bBEnuM@vT_Tw7es`0hnY-uqFx4qw(*pHOd~FD@sGB*>aaM8en9G0K#- zoqI!~CAYip+$(=FH}HlchnIV*ZXOKnp<&ysw(Ffrs?O*f|F*T0uQn=n+nX*z2#yFu zTJGYmSt&hrZ52`uRE
(*9wb1Lgx|4LJk+``^K{gWks>YDaO(fZJNvu9y#IDb1p_5i=HQt#y|Hy`C>!d|Me;~==tKbw%@UU7@ z*~8UDje|?Yr{7k`b}BM{vY2+~;R?DzmmCR9b#Jj}XFtozh6IHP3#re^~7^*(l}=A zh^{$PotwpRt{h{m#tTg-T3AT%_I_C_G&8+V+OwD@8i}kI&tY5VW+eZ}8M0ypU4C0I zpO*XH5QYt*Do@684Xw&f&X1N0>*&eq(KO`vLXlwgg-nherpT{+YCmKsCGlutAZTFm z-WbKp`NM12oMF|bitvn{H>ZyblYb)*d5_|m{7WoOc^N+Kjx$u}IbulR<^oP;04410 zyS0xo$gjB6V5d9mbE22DaK1>#}H>P_@6jX8z*|Oy4)UhFVISIHy;hGjV?j!NMw_JXLPIX)Av2 z^^`hT?_WF@aF)E=9C~fhG(Cpx9@dcszcgvBT8P&##1loA=V}9NSe}4d2`m;r#&{fB z?Wpx1bOvY&Dnp^F`O0fxe0cm5&(Y~=;$QB@swa@gUeNmcki$V7E6e(ziHlkSp_#7A zAJ+LUF)^{YpC*_Pc5raevEYoL!i#d3MaIkT( zv#_zVaPVrdv-5NE@^f=Av9a^Bv2_z|4g6mn>>bUlExi8U9cty(oj`}De`nBivvzZZ ns91ZN+qtTkyNH`RxLMnqyP3Oej38^kMG#p@C5bXIqxb&?USGCX literal 0 HcmV?d00001 diff --git a/pveum.adoc b/pveum.adoc index b5eea29..6de3597 100644 --- a/pveum.adoc +++ b/pveum.adoc @@ -100,6 +100,20 @@ To use an API token, set the HTTP header 'Authorization' to the displayed value of the form `PVEAPIToken=USER@REALM!TOKENID=UUID` when making API requests, or refer to your API client documentation. +[[pveum_resource_pools]] +Resource Pools +-------------- + +[thumbnail="screenshot/gui-datacenter-pool-window.png"] + +A resource pool is a set of virtual machines, containers, and storage +devices. It is useful for permission handling in cases where certain users +should have controlled access to a specific set of resources, as it allows for a +single permission to be applied to a set of elements, rather than having to +manage this on a per resource basis. Resource pools are often used in tandem +with groups so that the members of a group have permissions on a set of machines +and storage. + [[pveum_authentication_realms]] Authentication Realms --------------------- @@ -707,20 +721,13 @@ Verify the permissions of the user and token: pveum user permissions joe@pve pveum user token permissions joe@pve monitoring -Pools -~~~~~ - -An enterprise is usually structured into several smaller departments, -and it is common that you want to assign resources to them and -delegate management tasks. A pool is simply a set of virtual machines -and data stores. You can create pools on the GUI. After that you can -add resources to the pool (VMs, Storage). - -You can also assign permissions to the pool. Those permissions are -inherited to all pool members. +Resource Pools +~~~~~~~~~~~~~~ -Lets assume you have a software development department, so we first -create a group +An enterprise is usually structured into several smaller departments, and it is +common that you want to assign resources and delegate management tasks to each +of these. Let's assume that you want to set up a pool for a software development +department. First, create a group [source,bash] pveum groupadd developers -comment "Our software developers" @@ -732,7 +739,12 @@ Now we create a new user which is a member of that group NOTE: The -password parameter will prompt you for a password -I assume we already created a pool called ``dev-pool'' on the GUI. So we can now assign permission to that pool: +Then we create a resource pool for our development department to use + +[source,bash] + pveum pooladd dev-pool --comment "IT development pool" + +Finally, we can assign permissions to that pool [source,bash] pveum aclmod /pool/dev-pool/ -group developers -role PVEAdmin -- 2.39.2