RE: restrict Instance console access
Many thanks Wei In another test ACS 4.18 environment I can see the new role permission. We will look to update our production ACS 4.15.2 as soon as we are able Gary Dixon Quadris Cloud Manager 0161 537 4980 +44 7989717661 gary.di...@quadris.co.uk www.quadris.com Innovation House, 12-13 Bredbury Business Park Bredbury Park Way, Bredbury, Stockport, SK6 2SN -Original Message- From: Wei ZHOU Sent: Monday, February 19, 2024 10:30 PM To: users Cc: Gary Dixon Subject: Re: restrict Instance console access In 4.18+, an API is used to create the console URL: https://cloudstack.apache.org/api/apidocs-4.19/apis/createConsoleEndpoint.html Denying the API can disable the VM console. It is not available in 4.15.2 -Wei Nux 于 2024年2月19日周一 22:23写道： > Hi, > > I do not think there is one in that version - or later ones, although > certain things do change, you'll have to do it outside Cloudstack > somehow. > > On 2024-02-19 15:52, Gary Dixon wrote: > > HI > > > > ACS 4.15.2 > > > > Ubuntu 20.04 > > > > We have a requirement to restrict access to the VM console for > > certain tenants within our ACS implementation - however I cannot see > > a way to accomplish this via Role permissions. > > > > Is there a way to restrict VM Console access for specific users ? > > > > BR > > > > Gary > > > > Gary Dixon > > > > Quadris Cloud Manager > > > > 0161 537 4980 [1] > > > >+44 7989717661 [2] > > > > gary.di...@quadris.co.uk > > > > http://www/ > > .quadris.com%2F=05%7C02%7CGary.Dixon%40quadris.co.uk%7C7d03b57a > > 59d742cc6e2e08dc319a70bb%7Cf1d6abf3d3b44894ae16db0fb93a96a2%7C0%7C0% > > 7C638439786597983405%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJ > > QIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C0%7C%7C%7C=W0Hg1 > > 7S5ogJEMZ9mVHfe3vhQNmWT6IOjWVA6H4GH1lk%3D=0 > > > > Innovation House, 12‑13 Bredbury Business Park Bredbury Park Way, > > Bredbury, Stockport, SK6 2SN > > > > > > > > Links: > > -- > > [1] tel:0161%20537%204980 > > [2] tel:+44%207989717661 >
Re: restrict Instance console access
In 4.18+, an API is used to create the console URL: https://cloudstack.apache.org/api/apidocs-4.19/apis/createConsoleEndpoint.html Denying the API can disable the VM console. It is not available in 4.15.2 -Wei Nux 于 2024年2月19日周一 22:23写道： > Hi, > > I do not think there is one in that version - or later ones, although > certain things do change, you'll have to do it outside Cloudstack > somehow. > > On 2024-02-19 15:52, Gary Dixon wrote: > > HI > > > > ACS 4.15.2 > > > > Ubuntu 20.04 > > > > We have a requirement to restrict access to the VM console for certain > > tenants within our ACS implementation - however I cannot see a way to > > accomplish this via Role permissions. > > > > Is there a way to restrict VM Console access for specific users ? > > > > BR > > > > Gary > > > > Gary Dixon > > > > Quadris Cloud Manager > > > > 0161 537 4980 [1] > > > >+44 7989717661 [2] > > > > gary.di...@quadris.co.uk > > > > www.quadris.com > > > > Innovation House, 12‑13 Bredbury Business Park > > Bredbury Park Way, Bredbury, Stockport, SK6 2SN > > > > > > > > Links: > > -- > > [1] tel:0161%20537%204980 > > [2] tel:+44%207989717661 >
Re: restrict Instance console access
Hi, I do not think there is one in that version - or later ones, although certain things do change, you'll have to do it outside Cloudstack somehow. On 2024-02-19 15:52, Gary Dixon wrote: HI ACS 4.15.2 Ubuntu 20.04 We have a requirement to restrict access to the VM console for certain tenants within our ACS implementation - however I cannot see a way to accomplish this via Role permissions. Is there a way to restrict VM Console access for specific users ? BR Gary Gary Dixon Quadris Cloud Manager 0161 537 4980 [1] +44 7989717661 [2] gary.di...@quadris.co.uk www.quadris.com Innovation House, 12‑13 Bredbury Business Park Bredbury Park Way, Bredbury, Stockport, SK6 2SN Links: -- [1] tel:0161%20537%204980 [2] tel:+44%207989717661
