Cloud VM Set Management

Cloud VM Sets are managed by administrators with CLOUD_ADMIN privileges. The administrator must be a member of the Cloud Admin Group that is associated with the Cloud VM Set.

The table below shows the Cloud VM Set operations.

hicli Command Description
cert detail Display information about the specified certificate. For examples, see Examples: Cloud VM Set Certificates.

cert new

Create a new certificate for the Cloud VM Set.

cert rm

Remove an unused certificate.
cvmset Display current Cloud VM Set.
cvmset detail Display details about the specified Cloud VM Set.

cvmset kek_edit

Change the settings for the KEK (Key Encryption Key) associated with the Cloud VM Set. For examples, see Examples: Cloud VM Sets with the KEK Feature.

cvmset kek_state_change

Revoke or unrevoke the KEK.
cvmset list List all Cloud VM Sets.

cvmset list_tasks

Display list of tasks for the specified Cloud VM Set.
cvmset new Create a new Cloud VM Set. For examples, see Examples: Creating and Changing Cloud VM Sets .
cvmset select Select a Cloud VM Set.
cvmset set Change properties.
cvmset set grace Set the value for the grace period in seconds (default is 1 day).
cvmset set heartbeat Set the value for the heartbeat in seconds (default is 5 minutes, or 300 seconds).
cvmset set name Change the name of the Cloud VM Set.

cvmset set rekey

Set the value for the automatic rekey of disks interval in days/months/years (defaults to 0 which means not set).

cvmset set rekeybucket

Set the value for the rekeybucket for cvmset which controls the max number of auto rekeys that can be processed in parallel. Auto rekey is triggered when rekey interval expires. This value defaults to 1.

global set

Set the defaults for newly-created Cloud VM Sets. Changing these options does not affect any existing Cloud VM Sets. You can specify:

  • --heartbeat — The default value for the heartbeat in seconds (default is 5 minutes, or 300 seconds).
  • --grace — The value for the grace period in seconds (default is 1 day).
keyid new Create a KeyID. For examples, see Examples: KeyIDs .
keyid rm Remove a KeyID.
keyid revoke Revoke access to a KeyID.
keyid set expiration Set the expiration date for a KeyID.
keyid set onexpiry When a KeyID expires, set the expiration policy.
keyid unrevoke Unrevoke access to a KeyID.

Examples

List the existing Cloud VM Sets:

$ hicli cvmset list
Cloud VM Set Name     Admin Group           Description
---------------------------------------------------
Amazon AWS            Cloud Admin Group     VMs sets sited on Amazon Servers
vCloud Air            Cloud Admin Group     VMs sets deployed on vCloud Air \
                                              servers
Sales Staff           Cloud Admin Group     Sales staff worldwide

Set global default settings:

$ hicli global set --heartbeat=60 --grace=600

For other Cloud VM Set management examples, see: