<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
</head>
<body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;">
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="font-size: 16px;">Hi,</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="font-size: 16px;"><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 16px;">Sorry I missed the email</span><font face="Calibri,sans-serif"><span style="font-size: 16px;">…</span></font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<span style="font-size: 16px;"><br>
</span></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><span style="font-size: 16px;">Default template with ACL mechanism will definitely covers my use case. Admin-only writable template is </span></font><span style="font-size: 16px;">exactly</span><font face="Calibri,sans-serif"><span style="font-size: 16px;"> what I
am looking for. However, I saw the blueprint and it is “Not started”. There is there anything I can help implementing the ACL?</span></font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><span style="font-size: 16px;"><br>
</span></font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<font face="Calibri,sans-serif"><span style="font-size: 16px;">Right now I am using a short-term solution similar to the one Trevor suggested, creating template for each tenant when they logging into Horizon, but its hard to maintain and update templates. </span></font><font face="Calibri,sans-serif"><span style="font-size: 16px;">I</span></font><font face="Calibri,sans-serif"><span style="font-size: 16px;"> would
love to have the ACL asap. Please let me know if anything I can help.</span></font></div>
<div><font face="Calibri,sans-serif"><span style="font-size: 16px;"><br>
</span></font></div>
<div><font face="Calibri,sans-serif"><span style="font-size: 16px;">Thanks,</span></font></div>
<div><font face="Calibri,sans-serif"><span style="font-size: 16px;">Yanchao </span></font></div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<div style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<br>
</div>
<span id="OLK_SRC_BODY_SECTION" style="color: rgb(0, 0, 0); font-family: Calibri, sans-serif; font-size: 14px;">
<div style="font-family:Calibri; font-size:11pt; text-align:left; color:black; BORDER-BOTTOM: medium none; BORDER-LEFT: medium none; PADDING-BOTTOM: 0in; PADDING-LEFT: 0in; PADDING-RIGHT: 0in; BORDER-TOP: #b5c4df 1pt solid; BORDER-RIGHT: medium none; PADDING-TOP: 3pt">
<span style="font-weight:bold">From: </span>Sergey Lukjanov <<a href="mailto:slukjanov@mirantis.com">slukjanov@mirantis.com</a>><br>
<span style="font-weight:bold">Reply-To: </span>"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Date: </span>Thursday, April 16, 2015 at 3:22 AM<br>
<span style="font-weight:bold">To: </span>"OpenStack Development Mailing List (not for usage questions)" <<a href="mailto:openstack-dev@lists.openstack.org">openstack-dev@lists.openstack.org</a>><br>
<span style="font-weight:bold">Subject: </span>Re: [openstack-dev] Global Cluster Template in Sahara<br>
</div>
<div><br>
</div>
<div>
<div>
<div dir="ltr">Hi,
<div><br>
</div>
<div>first of all - yes, we've implemented mechanism for default templates addition in Kilo, please, take a look on this spec and related changes:
<a href="http://specs.openstack.org/openstack/sahara-specs/specs/kilo/default-templates.html">
http://specs.openstack.org/openstack/sahara-specs/specs/kilo/default-templates.html</a> <br>
<div><br>
</div>
<div>Regarding to your case, it's in fact about the admin-only writable templates shared between all tenants. We have a blueprint for implementing ACL for all Sahara resources -
<a href="https://blueprints.launchpad.net/sahara/+spec/resources-acl">https://blueprints.launchpad.net/sahara/+spec/resources-acl</a> . It's about implementing extended and flexible way to configure ACLs for resources and to provide end-users an ability to
have the following types of resources:</div>
<div><br>
</div>
<div>* default - tenant specific, anyone in tenant could edit or delete</div>
<div>* public - shared between tenants in read-only mode, writable for users in tenant where it was created</div>
<div>* protected - if True than could not be removed before updated to False using the resource update operation </div>
<div>* admin or protected=Admin - to make only admin users able to write/delete resource</div>
<div><br>
</div>
<div>during the Kilo cycle we've been discussing this idea and initially agreed on it, because it sounds like the most OpenStackish way to provide such functionality. I have a draft spec for it (not yet published), I will publish it today/tomorrow and send
a link to it to this thread.</div>
<div><br>
</div>
<div>Yanchao, does this ACL mechanism covers your use case? Any feedback appreciated.<br>
</div>
</div>
<div><br>
</div>
<div>Thanks.</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Thu, Apr 16, 2015 at 3:19 AM, lu jander <span dir="ltr">
<<a href="mailto:juvenboy1987@gmail.com" target="_blank">juvenboy1987@gmail.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div dir="ltr">
<p class="MsoNormal"><span lang="EN-US" style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);">We have already implement the default template for sahara</span></p>
<p class="MsoNormal"><span lang="EN-US" style="font-size: 10.5pt; font-family: Calibri, sans-serif; color: rgb(31, 73, 125);"><a href="https://blueprints.launchpad.net/sahara/+spec/default-templates" target="_blank">https://blueprints.launchpad.net/sahara/+spec/default-templates</a><b></b></span></p>
<div class="gmail_extra"><br>
<div class="gmail_quote">
<div>
<div class="h5">2015-04-16 5:22 GMT+08:00 Liang, Yanchao <span dir="ltr"><<a href="mailto:yanliang@ebay.com" target="_blank">yanliang@ebay.com</a>></span>:<br>
</div>
</div>
<blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
<div>
<div class="h5">
<div style="word-wrap:break-word;color:rgb(0,0,0);font-size:14px;font-family:Calibri,sans-serif">
<div>
<div style="font-family:Calibri"><span style="font-size:16px">Dear Openstack Developers,</span></div>
<div style="font-family:Calibri"><span style="font-size:16px"><br>
</span></div>
<div style="font-family:Calibri"><font style="font-size:16px">My name is Yanchao Liang. I am a software engineer in eBay, working on Hadoop as a Service on top of Openstack cloud.</font></div>
<div style="font-family:Calibri"><font style="font-size:16px"><br>
</font></div>
<div style="font-family:Calibri"><font style="font-size:16px">Right now we are using Sahara, Juno version. We want to stay current and introduce global template into sahara.</font></div>
<div style="font-family:Calibri"><font style="font-size:16px"><br>
</font></div>
<div style="font-family:Calibri"><font style="font-size:16px">In order to simplify the cluster creation process for user, we would like to create some cluster templates available for all users. User can just go to the horizon webUI, select one of the pre-popluated
templates and create a hadoop cluster, in just a few clicks. </font></div>
<div style="font-family:Calibri"><font style="font-size:16px"><br>
</font></div>
<div style="font-family:Calibri"><font style="font-size:16px">Here is how I would implement this feature: </font></div>
<ul style="font-family:Calibri">
<li><span style="font-size:16px">In the database, Create a new column in “cluster_templates" table called “is_global”, which is a boolean value indicating whether the template is available for all users or not.</span></li><li><span style="font-size:16px">When user getting the cluster template from database, add another function similar to “cluster_template_get”, which query the database for global templates.</span></li><li><span style="font-size:16px">When creating cluster, put the user’s tenant id in the “merged_values” config variable, instead of the tenant id from cluster template.</span></li><li><span style="font-size:16px">Use an admin account create and manage global cluster templates</span></li></ul>
<div style="font-family:Calibri"><span style="font-size:16px">Since I don’t know the code base as well as you do, what do you think about the global template idea? How would you implement this new feature? </span></div>
<div style="font-family:Calibri"><span style="font-size:16px"><br>
</span></div>
<div style="font-family:Calibri"><span style="font-size:16px">We would like to contribute this feature back to the Openstack community. Any feedback would be greatly appreciated. Thank you.</span></div>
<div style="font-family:Calibri"><span style="font-size:16px"><br>
</span></div>
<div style="font-family:Calibri"><span style="font-size:16px">Best,</span></div>
<div style="font-family:Calibri"><span style="font-size:16px">Yanchao</span></div>
</div>
<div><span style="font-size:16px"><br>
</span></div>
</div>
<br>
</div>
</div>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
</div>
</div>
<br>
__________________________________________________________________________<br>
OpenStack Development Mailing List (not for usage questions)<br>
Unsubscribe: <a href="http://OpenStack-dev-request@lists.openstack.org?subject:unsubscribe" target="_blank">
OpenStack-dev-request@lists.openstack.org?subject:unsubscribe</a><br>
<a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack-dev</a><br>
<br>
</blockquote>
</div>
<br>
<br clear="all">
<div><br>
</div>
-- <br>
<div class="gmail_signature">Sincerely yours,<br>
Sergey Lukjanov<br>
Sahara Technical Lead<br>
(OpenStack Data Processing)<br>
Principal Software Engineer<br>
Mirantis Inc.</div>
</div>
</div>
</div>
</div>
</span>
</body>
</html>