Please find the latest version of these slides at:

https://code.google.com/p/ganeti/wiki/LISA2013

• Ganeti web manager
  • Overview
  • Installation
  • Usage
• Synnefo and okeanos
  • Overview
  • Quick demo
• ganetimgr web manager
  • Overview

• Web-based management system
• Easier management: no commands to remember
• Delegate authority: enables "self-service management" for users
• A project of OSU Open Source Lab
  • Written in Python using the Django web framework
  • GPLv2

• User/Group model (independent, not tied to LDAP, etc.)
• A user can be in any number of groups
• User/Groups have fine-grained settings on what they can/can't do
• Admin Permissions
  • Control what a user/group can do on each cluster and instance
• Quota System
  • Restrict resource usage by user or group

• Restricts resources used by users and groups
  • RAM
  • disk space
  • vCPUs
• Default quota for each cluster and user
• No quota == unlimited.

• Assigning individuals access is nice, but gets messy fast.
• Use "role-based access control" (RBAC)
• Clusters should be owned by a group.
• Add people to the groups they should be able to administer.
• Instances should be owned by groups or a single user
  • don't create a group if only one person will ever be in it

• Permissions are recorded by setting Ganeti tags on clusters and instances.
• Tags are cached in a local database for speed

Format:

GANETI_WEB_MANAGER:<permission>:[G|U]:<user_id>

Examples:

Admin permission for User with id 2:

GANETI_WEB_MANAGER:admin:U:2

Start permission for Group with id 4:

GANETI_WEB_MANAGER:start:G:4

• Open Source project to use Ganeti to build a complete private cloud solution
• Relatively new project with a lot of horsepower behind it.
• Project home:
  • http://www.synnefo.org/
  • https://code.grnet.gr/projects/synnefo
• Documentation:
  • http://docs.dev.grnet.gr/synnefo/latest/
• Public cloud based on it:
  • https://www.okeanos.io

• Identity Management (codename: astakos)
• Object Storage Service (codename: pithos+)
• Compute Service (codename: cyclades)
• Network Service (part of Cyclades)
• Image Registry (codename: plankton)
• Billing Service (codename: aquarium)
• Volume Storage Service (codename: archipelago)

Time to see it work!

• Simplified multicluster web manager geared at end users
• Original code of the Ganeti web manager, then evolved indepentently
• See http://ganetimgr.readthedocs.org/en/latest/
• Code at https://code.grnet.gr/projects/ganetimgr