Skip to content
This repository has been archived by the owner on Nov 9, 2020. It is now read-only.

moving updated MD files from gh-pages branch to vmware/master/doc [SKIP CI] #1535

Conversation

shuklanirdesh82
Copy link
Contributor

@shuklanirdesh82 shuklanirdesh82 commented Jul 3, 2017

moving updated MD files from gh-pages branch to vmware/master/doc.

This is a final PR to meet objective of #1370

As part of #1498, missing commits from vmware/master/docs/*.md merged to gh-pages/jeckyll-docs/*.md; so the content has been in synced. Now gh-pages were having some formatting changes were left out in vmware/master/docs/*.md hence this PR.

Note: This is PR is to bring changes made in gh-pages which never made to vmware/master/docs/*.md.

After this PR content and format for both vmware/master/docs & gh-pages/ will be in sync, at the release all changes from vmware/master/docs copies to gh-pages/.

@@ -1,8 +1,9 @@
* IMPORTANT: This is an experimental feature supported only on standalone ESX as of release 0.12. We are seeking feedback/requirements to support mult-tenancy across vSphere Cluster/Datacenter. You can drop us a note at containers@vmware.com.
---
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Multi-tenancy is not a experimental feature any more?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

sorry .. can you elaborate here? what do you mean by "Multi-tenancy is not a experimental feature any more?"

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It seems that you delete the paragraph that "multi-tenancy is a experimental feature".

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

let's take care as part of #1536.

```

### Default privileges
When a VM tries to manipulate volumes on a datastore which is not configured, the system will use _DEFAULT privilege, which is created automatically by system post install. This _DEFAULT privilege allows access to ANY datastore by default. An admin can edit or remove this record, thus locking down the functionality to allow access only to explicitly configured datastores.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We don't have default privileges, instead, we create privileges to "_ALL_DS" and "_VM_DS" for default vmgroup post install.

Copy link
Contributor Author

@shuklanirdesh82 shuklanirdesh82 Jul 3, 2017

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

In that case vmware/master/docs/features/tenancy.md is having redundant information and needs to be removed and we can manage such information at admin_cli.md only.

/CC @msterin

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be taken care by #1536

When a VM addresses the volume using short notation (volume_name, without @datastore), all VMs in this vmgroup will use default datastore to resolve short volume reference (volume_name will actually mean volume_name@default_datastore).

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Now, "default_datastore" is must be set when creating a vmgroup.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be taken care by #1536

If "default_datastore" is not set for a vmgroup, then datastore where the VM resides will be used as "default_datastore".

## Example

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The following example need to be updated. "default_datastore" must be specified when creating a vmgroup.

Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

admin-cli.md has the updated info regarding the behavior for multi-tenancy, so tenency.md need to be updated accordingly.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be taken care by #1536

1. Thick Provision Lazy Zeroed ([zeroedthick]((https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1022242)))
2. Thin Provision ([thin]((https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1022242)))
3. Thick Provision Eager Zeroed ([eagerzeroedthick]((https://kb.vmware.com/selfservice/microsites/search.do?language=en_US&cmd=displayKC&externalId=1022242)))
1. Persistent mode: In persistent mode the VMDK becomes part of VM the snapshot if a snapshot of the VM is taken while VMDK was attached.
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

typo: "VM the snapshot" -> "the VM snapshot"

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done!

Lets consider a sample use case where there are 2 teams – Dev and Test working on Product1. Lets create separate vmgroups (namely Product1Dev and Product2Test) for each of the teams where we can put restriction on datastore consumption.

```
# /usr/lib/vmware/vmdkops/bin/vmdkops_admin.py vmgroup create --name=Product1Dev
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

We should correct this example here - we are not specifying --default-datatsore here.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be taken care by #1536

# /usr/lib/vmware/vmdkops/bin/vmdkops_admin.py vmgroup create --name=Product1Dev
vmgroup 'Product1Dev' is created. Do not forget to run 'vmgroup vm add' and 'vmgroup access add' commands to enable access control.

#/usr/lib/vmware/vmdkops/bin/vmdkops_admin.py vmgroup create --name=Product1Test
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

"Default_datastore" is a required parameter.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

should be taken care by #1536

@@ -1,3 +1,5 @@
###...
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Please remove this if does this does not adds any value.

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

done!

Copy link
Contributor

@lipingxue lipingxue left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@shuklanirdesh82 shuklanirdesh82 merged commit 73009fc into vmware-archive:master Jul 3, 2017
@shuklanirdesh82 shuklanirdesh82 deleted the docSyncFromGHpages.shuklanirdesh82 branch July 3, 2017 21:38
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants