Nested Pools

[ryuspeed]

First off, great software. I came from a vmware background and have found proxmox easy to use and understand. There is one feature though that would be very helpful, and that would be nested pools. As our infrastructure continues to grow, we start having an issue with organization. We currently have more than 50 VMs and I anticipate that will double and trying to manage all of those gets increasingly complex. I'm sure we're not an oddity and there are installations running many more VMs.

Nested pools would go a long way to helping with this problem. We would be able to group multi-tiered applications into groups and assign permissions accordingly.

In the absence of that, what are others doing to organize their VMs and assign permissions?

P.S. LDAP groups for permissions would be very helpful as well.

 

[LnxBil]

Hi and welcome,

I use groups based on the severity of the VMs. We have a small crucial infrastructure with about 20 VMs, (all in 1xxx) then additional, but not crucial stuff 2xxx, and various-purpose groups for testing, VPN, VDI and also personal groups. Permissions are bases on the pool, but we do not have a lot of different groups of people workign with proxmox.

With consern to the nested groups, I helped myself by using test-this and test-that, so I have a visual grouping by prefix. Each group has its own number pool, so I always know at least what group by VMID belongs to.

Proxmox's LDAP lacks IMHO some features like user-autocreate and group mapping, but I haven't looked at 4.x LDAP-wise. Maybe it's already there. IIRC I had to recreate my groups in Proxmox.

 

[fireon]

Maybe this help you for some ideas. We also also LDAP for auth, and local ACLs in PVE. https://pve.proxmox.com/wiki/User_Management
https://pve.proxmox.com/wiki/Two-Factor_Authentication

 

[malevolent]

I've just wrote on the mailing list for this exact feature, it would be very useful!