Skip to content
Open
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion source/adminguide/accounts.rst
Original file line number Diff line number Diff line change
Expand Up @@ -534,7 +534,7 @@ OpenLDAP)
- `uniquemember`
- Attribute for uniquemembers within a group.

.. note:: ``ldap.search.group.principle`` is required when using ``linkaccounttoldap``.
.. note:: ``ldap.search.group.principle`` is required when using ``linkaccounttoldap``.

Once configured, on Add Account page, you will see an "Add LDAP Account" button which opens a dialog and the selected Users can be imported.

Expand Down
7 changes: 4 additions & 3 deletions source/adminguide/extensions/inbuilt_extensions.rst
Original file line number Diff line number Diff line change
Expand Up @@ -122,10 +122,11 @@ To set up the Proxmox Extension, follow these steps in CloudStack:
* **template_type**: `template` or `iso`
* **template_id**: ID of the template in Proxmox (if `template_type` is `template`)

|proxmox-add-template.png|
|proxmox-add-template.png|

* **iso_path**: Full path to the ISO in Proxmox (if `template_type` is `iso`)
|proxmox-add-iso.png|

|proxmox-add-iso.png|

Note: Templates and ISOs should be stored on shared storage when using multiple Proxmox nodes. Or copy the template/iso to each host's local storage at the same location.

Expand Down Expand Up @@ -481,4 +482,4 @@ Please find some additional notes with respect to the networking and access rela
.. |MaaS-add-reserve-iprange.png| image:: /_static/images/MaaS-add-reserve-iprange.png
.. |MaaS-disable-dhcp.png| image:: /_static/images/MaaS-disable-dhcp.png
.. |MaaS-add-sshkeypair.png| image:: /_static/images/MaaS-add-sshkeypair.png
.. |MaaS-enable-dhcp-on-servers.png| image:: /_static/images/MaaS-enable-dhcp-on-servers.png
.. |MaaS-enable-dhcp-on-servers.png| image:: /_static/images/MaaS-enable-dhcp-on-servers.png
36 changes: 18 additions & 18 deletions source/adminguide/networking/dns_framework.rst
Original file line number Diff line number Diff line change
Expand Up @@ -191,32 +191,32 @@ Using the API:
:header-rows: 1

* - Name
- Required
- Description
- Required
- Description
* - ``id``
- Yes
- The ID of the DNS server to update
- Yes
- The ID of the DNS server to update
* - ``nameservers``
- No
- Comma separated list of name servers; used to create NS records for the DNS Zone (for example, ns1.example.com, ns2.example.com)
- No
- Comma separated list of name servers; used to create NS records for the DNS Zone (for example, ns1.example.com, ns2.example.com)
* - ``name``
- No
- Name of the DNS server
- No
- Name of the DNS server
* - ``dnsapikey``
- No
- API key or credentials for the external provider
- No
- API key or credentials for the external provider
* - ``ispublic``
- No
- Whether this DNS server can be used by accounts other than the owner to create and manage DNS zones
- No
- Whether this DNS server can be used by accounts other than the owner to create and manage DNS zones
* - ``port``
- No
- Port number of the external DNS server
- No
- Port number of the external DNS server
* - ``publicdomainsuffix``
- No
- Domain suffix that restricts DNS zones created by non-owner accounts to subdomains of this suffix
- No
- Domain suffix that restricts DNS zones created by non-owner accounts to subdomains of this suffix
* - ``url``
- No
- API URL of the provider
- No
- API URL of the provider

.. note:: Updating ``nameservers`` only affects new DNS zones created through this server. Existing DNS zones and their current NS records are not modified.

Expand Down
6 changes: 5 additions & 1 deletion source/adminguide/storage/clvm.rst
Original file line number Diff line number Diff line change
Expand Up @@ -14,10 +14,12 @@
under the License.

From CloudStack 4.23 onwards, CloudStack supports two types for Clustered Logical Volume Manager (CLVM) primary storage:

- CLVM: LVM volumes with RAW format
- CLVM_NG (Next Generation): LVM volumes with QCOW2 format that supports advanced features.

Both use the same underlying infrastructure:

- `lvmlockd` daemon for lock management
- `sanlock` for distributed locking
- Shared volume groups across cluster hosts
Expand All @@ -44,7 +46,7 @@ Disadvantages:
- Higher secondary storage bandwidth usage

.. note::
The original CLVM implementation used the clvmd (Clustered LVM daemon) along with corosync/pacemaker for cluster coordination. This technology has been deprecated in modern Linux distributions (RHEL 8+, Ubuntu 20.04+). CloudStack's current implementation uses the modern lvmlockd + sanlock stack, which is more reliable. This same modern infrastructure is shared with CLVM_NG - the only difference between CLVM and CLVM_NG is the disk image format (RAW vs QCOW2), not the locking mechanism.
The original CLVM implementation used the clvmd (Clustered LVM daemon) along with corosync/pacemaker for cluster coordination. This technology has been deprecated in modern Linux distributions (RHEL 8+, Ubuntu 20.04+). CloudStack's current implementation uses the modern lvmlockd + sanlock stack, which is more reliable. This same modern infrastructure is shared with CLVM_NG - the only difference between CLVM and CLVM_NG is the disk image format (RAW vs QCOW2), not the locking mechanism.

CLVM_NG (QCOW2 format):
~~~~~~~~~~~~~~~~~~~~~~~
Expand Down Expand Up @@ -195,8 +197,10 @@ clvm.secure.zero.fill
- **Category:** Advanced
- **Description:** When enabled, CLVM volumes are zero-filled at deletion time to prevent data recovery by VMs reusing the space, as thick LVM volumes write data linearly
- **Impact:**

- Enabled: Volumes are securely wiped on deletion (slower deletion, more secure)
- Disabled: Fast deletion, but data may be recoverable

- **Propagation:** Setting is propagated to hosts when they connect to the storage pool. Changing requires disconnecting/reconnecting hosts or restarting KVM agent
- **Recommendation:** Enable for environments with strict security/compliance requirements (PCI-DSS, HIPAA). Disable for performance-critical environments where deletion speed matters more than data security
- **Use Case:** Production environments handling sensitive data, multi-tenant environments with strict data isolation requirements
Expand Down
6 changes: 4 additions & 2 deletions source/adminguide/vm_volume_allocators.rst
Original file line number Diff line number Diff line change
Expand Up @@ -133,7 +133,9 @@ Above config prioritizes CPU at 70% weight and RAM at 30% when ranking pods, clu

.. note::
- `host.capacityType.to.order.clusters` is only respected for host ordering when:
.. code:: bash

vm.allocation.algorithm: firstfitleastconsumed
.. code:: bash

vm.allocation.algorithm: firstfitleastconsumed

- When using COMBINED, make sure to tune cpu.to.memory.capacity.weight to reflect your environment’s resource constraints and workload profiles.
1 change: 1 addition & 0 deletions source/plugins/cloudstack-kubernetes-service.rst
Original file line number Diff line number Diff line change
Expand Up @@ -815,6 +815,7 @@ There could be Calico routing edge case encountered in some environments. By def
kubectl get ippool.crd.projectcalico.org -o yaml

.. code-block:: bash

apiVersion: crd.projectcalico.org/v1
kind: IPPool
metadata:
Expand Down
4 changes: 2 additions & 2 deletions source/plugins/netris-plugin.rst
Original file line number Diff line number Diff line change
Expand Up @@ -146,7 +146,7 @@ VPC Tier creation on CloudStack performs the following actions on Netris:
- Global Routing = true. This parameter allows advertising the IPs for the VPC tier (required for Routed mode)

.. note::
Important: Please consider at least one running VM per VPC tier to prevent VPC tier state transition to Allocated state
Important: Please consider at least one running VM per VPC tier to prevent VPC tier state transition to Allocated state


Supported VPC Services
Expand Down Expand Up @@ -246,4 +246,4 @@ Supported VPC Services
- **Destination Address**: The ACL rule CIDR
- **Destination Port**: X-Y, where:
- *X*: The ACL rule start port
- *Y*: The ACL rule end port
- *Y*: The ACL rule end port
Loading