AW: Resource type for an ACL? (API)
Hi, all, here a follow-up on ACL tagging. Following Andrea's suggestion: >> I think you may be looking at "create tags resourcetype=networkacl " we have now some tests but I must admit I am not sure about the following things: - is it possible to tag both single ACL items like FirewallRules or just ACLLists? - what is the exact spelling of their resource types? I have tried the following as domain master user: - tag ACL item using resource type spelling "NetworkACL" - tag ACL item using resource type spelling "NetworkAcl" Here the system says, "530 - Does not have permission to operate in this domain". Where could be this permission set given it is generally possible to tag resources you can create and delete yourself? - then, tag an ACL list using resource type "NetworkACL". Here the system says, it can't match given ID and resource type. - finally, tag an ACL list using resource type "NetworkACLList". In this case I get the error "The resource type NetworkACLList doesn't support resource tags". Test code (includes also a unit test to tag a NAT network which passes): https://github.com/pmury/acs-uat/blob/master/test/test_tags.py kind regards Peter kind regards Peter Von: Anurag A [anuraga.i...@gmail.com] Gesendet: Freitag, 5. April 2019 12:45 An: users@cloudstack.apache.org Cc: anurag.awas...@shapeblue.com Betreff: Re: Resource type for an ACL? (API) Typo - Just to clarify - you are able to create tags as root admin and domain admins but not as user? On Fri, Apr 5, 2019 at 4:11 PM Anurag A wrote: > Hi Peter, > > Just to clarify - you unable to create tags as root admin and domain > admins but not as user? > > That seems expected and there are some open issues around that too - > https://github.com/apache/cloudstack/issues/2823 > > May be someone else has more inputs on this so you can wait for their > response. > > Thanks! > Regards, > Anurag > > On Fri, Apr 5, 2019 at 3:20 PM wrote: > >> >> Hi, Anurag, >> >> thank you for your quick response - as I've found out, I am actually NOT >> able to create a tag. >> >> Error message: >> "The user is not allowed to request the API command or the API command >> does not exist" >> >> But, I tried it as a root user of an account - is tagging then allowed >> for the global root admin only? >> >> Call: >> result = self.cs.create_tags(resourceids=self.firewallruleid, >> resourcetype='FirewallRule', tags = {'foo':'bar'}) >> >> kind regards >> Peter >> >> >> Von: Anurag Awasthi [anurag.awas...@shapeblue.com] >> Gesendet: Freitag, 5. April 2019 07:04 >> An: Muryshkin, Peter; users@cloudstack.apache.org >> Betreff: Re: Resource type for an ACL? (API) >> >> Hi Peter, >> >> Welcome to the community! >> >> I think you may be looking at "create tags resourcetype=networkacl " >> call. >> >> Kind Regards, >> Anurag >> >> anurag.awas...@shapeblue.com >> www.shapeblue.com >> @shapeblue >> >> >> >> >> >> From: peter.murysh...@zv.fraunhofer.de >> Sent: Thursday, April 4, 2019 8:31 PM >> To: users@cloudstack.apache.org >> Subject: Resource type for an ACL? (API) >> >> Hi, all, >> >> while I can create a tag for a firewall rule, I can't find the resource >> name for network ACL item. >> >> Is it anyhow possible to set a tag there? >> >> >> P.S. This is my first time I post to this mailing list, so hello >> everybody - Apache CloudStack is really great and from the first impression >> the community seems to be very enjoyable! >> >> kind regards >> Peter >> >> >>
AW: Resource type for an ACL? (API)
Hi, Anurag, I have tested so far only as domain admin. kind regards Peter Von: Anurag A [anuraga.i...@gmail.com] Gesendet: Freitag, 5. April 2019 12:45 An: users@cloudstack.apache.org Cc: anurag.awas...@shapeblue.com Betreff: Re: Resource type for an ACL? (API) Typo - Just to clarify - you are able to create tags as root admin and domain admins but not as user? On Fri, Apr 5, 2019 at 4:11 PM Anurag A wrote: > Hi Peter, > > Just to clarify - you unable to create tags as root admin and domain > admins but not as user? > > That seems expected and there are some open issues around that too - > https://github.com/apache/cloudstack/issues/2823 > > May be someone else has more inputs on this so you can wait for their > response. > > Thanks! > Regards, > Anurag > > On Fri, Apr 5, 2019 at 3:20 PM wrote: > >> >> Hi, Anurag, >> >> thank you for your quick response - as I've found out, I am actually NOT >> able to create a tag. >> >> Error message: >> "The user is not allowed to request the API command or the API command >> does not exist" >> >> But, I tried it as a root user of an account - is tagging then allowed >> for the global root admin only? >> >> Call: >> result = self.cs.create_tags(resourceids=self.firewallruleid, >> resourcetype='FirewallRule', tags = {'foo':'bar'}) >> >> kind regards >> Peter >> >> ____ >> Von: Anurag Awasthi [anurag.awas...@shapeblue.com] >> Gesendet: Freitag, 5. April 2019 07:04 >> An: Muryshkin, Peter; users@cloudstack.apache.org >> Betreff: Re: Resource type for an ACL? (API) >> >> Hi Peter, >> >> Welcome to the community! >> >> I think you may be looking at "create tags resourcetype=networkacl " >> call. >> >> Kind Regards, >> Anurag >> >> anurag.awas...@shapeblue.com >> www.shapeblue.com >> @shapeblue >> >> >> >> >> >> From: peter.murysh...@zv.fraunhofer.de >> Sent: Thursday, April 4, 2019 8:31 PM >> To: users@cloudstack.apache.org >> Subject: Resource type for an ACL? (API) >> >> Hi, all, >> >> while I can create a tag for a firewall rule, I can't find the resource >> name for network ACL item. >> >> Is it anyhow possible to set a tag there? >> >> >> P.S. This is my first time I post to this mailing list, so hello >> everybody - Apache CloudStack is really great and from the first impression >> the community seems to be very enjoyable! >> >> kind regards >> Peter >> >> >>
Re: Resource type for an ACL? (API)
Typo - Just to clarify - you are able to create tags as root admin and domain admins but not as user? On Fri, Apr 5, 2019 at 4:11 PM Anurag A wrote: > Hi Peter, > > Just to clarify - you unable to create tags as root admin and domain > admins but not as user? > > That seems expected and there are some open issues around that too - > https://github.com/apache/cloudstack/issues/2823 > > May be someone else has more inputs on this so you can wait for their > response. > > Thanks! > Regards, > Anurag > > On Fri, Apr 5, 2019 at 3:20 PM wrote: > >> >> Hi, Anurag, >> >> thank you for your quick response - as I've found out, I am actually NOT >> able to create a tag. >> >> Error message: >> "The user is not allowed to request the API command or the API command >> does not exist" >> >> But, I tried it as a root user of an account - is tagging then allowed >> for the global root admin only? >> >> Call: >> result = self.cs.create_tags(resourceids=self.firewallruleid, >> resourcetype='FirewallRule', tags = {'foo':'bar'}) >> >> kind regards >> Peter >> >> ____ >> Von: Anurag Awasthi [anurag.awas...@shapeblue.com] >> Gesendet: Freitag, 5. April 2019 07:04 >> An: Muryshkin, Peter; users@cloudstack.apache.org >> Betreff: Re: Resource type for an ACL? (API) >> >> Hi Peter, >> >> Welcome to the community! >> >> I think you may be looking at "create tags resourcetype=networkacl " >> call. >> >> Kind Regards, >> Anurag >> >> anurag.awas...@shapeblue.com >> www.shapeblue.com >> @shapeblue >> >> >> >> >> >> From: peter.murysh...@zv.fraunhofer.de >> Sent: Thursday, April 4, 2019 8:31 PM >> To: users@cloudstack.apache.org >> Subject: Resource type for an ACL? (API) >> >> Hi, all, >> >> while I can create a tag for a firewall rule, I can't find the resource >> name for network ACL item. >> >> Is it anyhow possible to set a tag there? >> >> >> P.S. This is my first time I post to this mailing list, so hello >> everybody - Apache CloudStack is really great and from the first impression >> the community seems to be very enjoyable! >> >> kind regards >> Peter >> >> >>
Re: Resource type for an ACL? (API)
Hi Peter, Just to clarify - you unable to create tags as root admin and domain admins but not as user? That seems expected and there are some open issues around that too - https://github.com/apache/cloudstack/issues/2823 May be someone else has more inputs on this so you can wait for their response. Thanks! Regards, Anurag On Fri, Apr 5, 2019 at 3:20 PM wrote: > > Hi, Anurag, > > thank you for your quick response - as I've found out, I am actually NOT > able to create a tag. > > Error message: > "The user is not allowed to request the API command or the API command > does not exist" > > But, I tried it as a root user of an account - is tagging then allowed for > the global root admin only? > > Call: > result = self.cs.create_tags(resourceids=self.firewallruleid, > resourcetype='FirewallRule', tags = {'foo':'bar'}) > > kind regards > Peter > > > Von: Anurag Awasthi [anurag.awas...@shapeblue.com] > Gesendet: Freitag, 5. April 2019 07:04 > An: Muryshkin, Peter; users@cloudstack.apache.org > Betreff: Re: Resource type for an ACL? (API) > > Hi Peter, > > Welcome to the community! > > I think you may be looking at "create tags resourcetype=networkacl " > call. > > Kind Regards, > Anurag > > anurag.awas...@shapeblue.com > www.shapeblue.com > @shapeblue > > > > > ____ > From: peter.murysh...@zv.fraunhofer.de > Sent: Thursday, April 4, 2019 8:31 PM > To: users@cloudstack.apache.org > Subject: Resource type for an ACL? (API) > > Hi, all, > > while I can create a tag for a firewall rule, I can't find the resource > name for network ACL item. > > Is it anyhow possible to set a tag there? > > > P.S. This is my first time I post to this mailing list, so hello everybody > - Apache CloudStack is really great and from the first impression the > community seems to be very enjoyable! > > kind regards > Peter > > >
AW: Resource type for an ACL? (API)
Hi, Anurag, thank you for your quick response - as I've found out, I am actually NOT able to create a tag. Error message: "The user is not allowed to request the API command or the API command does not exist" But, I tried it as a root user of an account - is tagging then allowed for the global root admin only? Call: result = self.cs.create_tags(resourceids=self.firewallruleid, resourcetype='FirewallRule', tags = {'foo':'bar'}) kind regards Peter Von: Anurag Awasthi [anurag.awas...@shapeblue.com] Gesendet: Freitag, 5. April 2019 07:04 An: Muryshkin, Peter; users@cloudstack.apache.org Betreff: Re: Resource type for an ACL? (API) Hi Peter, Welcome to the community! I think you may be looking at "create tags resourcetype=networkacl " call. Kind Regards, Anurag anurag.awas...@shapeblue.com www.shapeblue.com @shapeblue From: peter.murysh...@zv.fraunhofer.de Sent: Thursday, April 4, 2019 8:31 PM To: users@cloudstack.apache.org Subject: Resource type for an ACL? (API) Hi, all, while I can create a tag for a firewall rule, I can't find the resource name for network ACL item. Is it anyhow possible to set a tag there? P.S. This is my first time I post to this mailing list, so hello everybody - Apache CloudStack is really great and from the first impression the community seems to be very enjoyable! kind regards Peter
Re: Resource type for an ACL? (API)
Hi Peter, Welcome to the community! I think you may be looking at "create tags resourcetype=networkacl " call. Kind Regards, Anurag From: peter.murysh...@zv.fraunhofer.de Sent: Thursday, April 4, 2019 8:31 PM To: users@cloudstack.apache.org Subject: Resource type for an ACL? (API) Hi, all, while I can create a tag for a firewall rule, I can't find the resource name for network ACL item. Is it anyhow possible to set a tag there? P.S. This is my first time I post to this mailing list, so hello everybody - Apache CloudStack is really great and from the first impression the community seems to be very enjoyable! kind regards Peter anurag.awas...@shapeblue.comĀ www.shapeblue.com Amadeus House, Floral Street, London WC2E 9DPUK @shapeblue
Resource type for an ACL? (API)
Hi, all, while I can create a tag for a firewall rule, I can't find the resource name for network ACL item. Is it anyhow possible to set a tag there? P.S. This is my first time I post to this mailing list, so hello everybody - Apache CloudStack is really great and from the first impression the community seems to be very enjoyable! kind regards Peter