解决了

Nutanix锁定虚拟机

  • 2021年1月25
  • 3回复
  • 80的浏览量
G

,下午好!

我正在建立一个新的PKI基础设施在一个Nutanix集群，我想关闭根CA的安全。有没有办法添加一些安全措施，使虚拟机不能无意中启动?

图标

最佳答案Alona2021年1月28日03:20

RBAC on PC with Role Assignment would allow you to that. You\u2019d need an authentication server LDAP or AD configured. If designed properly, RBAC should not need much change.<\/p>

You\u2019d have a role that allows for that VM to be powered on AND other roles do not have power on permissions extending to that VM. Remember that cluster admin can do everything.<\/p>

Security Guide: Controlling User Access (RBAC)<\/a><\/p>","className":"post__content__best_answer"}">

查看原始
Good afternoon, all!<\/p>

I\u2019m setting up a new PKI infrastructure in a Nutanix cluster and I want to shut down the root CA for safekeeping. Is there a way to add some safeguards so that the VM can\u2019t be started inadvertently?<\/p>","quoteUsername":"Gregg_ITX","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

本主题已关闭供评论

3回复

Alona
排名
Userlevel 6
徽章 ＋5

嗨 @Gregg_ITX

比如，启动虚拟机的权限限制在少数用户?

Hi @Gregg_ITX<\/user-mention>\u00a0<\/p>

Something like restricted permissions to start the VM limited to a few users only?<\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

G

嗨 @Alona

精确!只有“initiate”启动虚拟机。

Hi @Alona<\/user-mention>\u00a0<\/p>

Precisely!\u00a0 That way only the Initiated can start the VM.<\/p>

\u00a0<\/p>","quoteUsername":"Gregg_ITX","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Alona
排名
Userlevel 6
徽章 ＋5

PC上的RBAC与角色分配将允许你这样做。您需要配置一个身份验证服务器LDAP或AD。如果设计得当，RBAC应该不需要太多更改。

您有一个角色，允许该虚拟机开机，而其他角色没有权限扩展到该虚拟机。请记住，集群管理员可以做任何事情。

安全指南:控制用户访问(RBAC)

RBAC on PC with Role Assignment would allow you to that. You\u2019d need an authentication server LDAP or AD configured. If designed properly, RBAC should not need much change.<\/p>

You\u2019d have a role that allows for that VM to be powered on AND other roles do not have power on permissions extending to that VM. Remember that cluster admin can do everything.<\/p>

Security Guide: Controlling User Access (RBAC)<\/a><\/p>","quoteUsername":"Alona","translations":{"Common":{"like":"Like","unlike":"Unlike"},"Forum":{"Quote":"Quote","Share":"Share"}}}">

Baidu