CodeArts Deploy Permission Management Best Practices

Overview

The CodeArts Deploy permission management mainly involves the management of these three parts: application, host cluster, and environment. Application permissions are divided into project-level application permissions and application-level permissions.

Project-level application permissions serve as templates for all applications within a project. These permissions are applied by default when creating a new application. If you need to modify the permissions for a specific application, you can cancel the project-level configurations in the application's permission management and make the necessary adjustments.

Preparations

• You have enabled and authorized CodeArts Deploy.
• You have created a project (select the Scrum template and name it Project_Test).

Accessing CodeArts Deploy in a Project

1. Log in to the Huawei Cloud console.
2. Click in the upper left corner of the page and choose Developer Services > CodeArts.
3. Click Go to Workspace. The CodeArts homepage is displayed.
4. Go to the Project_Test project page created in the preparation.
5. In the navigation pane, choose CICD > Deploy.

Editing Project-Level Application Permissions

1. Accessing CodeArts Deploy in a Project.
2. In the navigation pane, choose Settings > Permissions. The project-level permission management page is displayed, as shown in Project-level permission management.
   Figure 1 Project-level permission management
   

3. On the role list page on the left, select the role whose permissions you want to edit and expand the Deploy service tab page on the right. Click Edit in the lower left corner to edit the project-level deployment application permissions, as shown in Figure 2.
   Figure 2 Editing project-level deployment application permissions
   

4. After the editing is complete, click Save to save the project-level deployment application permissions of the corresponding role, as shown in Saving project-level deployment application permissions.
   Figure 3 Saving project-level deployment application permissions
   

Editing Application Permissions

1. Deploy a Service in a Project.
2. Click Create Application. On the displayed Basic Information page, as shown in Basic Information, configure the basic information about the deployment application by referring to Application basic information.
   Figure 4 Basic information
   

   Table 1 Basic application parameters

   Parameter	Description
   Name	Application name. Enter Deploy-Test. Enter 3 to 128 characters, including letters, digits, hyphens (-), and underscores (_).
   Project	Project where the deployment application is located. Select the created project Project_Test.
   Description	Enter an application description with a maximum of 1,024 characters.
   Execution Agent Pool	Select Default.
   Deploy from pipeline	Deselect this parameter.

3. After configuring the basic information, click Next. On the displayed Select Template page, select the Deploy a General Application template and click OK.
4. Switch to the Permissions page. By default, Use Project Permissions is enabled, and the Project-level permission management change is synchronized.
5. Click Use Project Permissions to disable the synchronization of project-level permission changes and modify role permissions at the application level.
   Figure 5 Disabling the functions of using project permission configuration and customizing permissions
   

6. Customize and adjust the role permissions of the application as required. After the adjustment is complete, click Save to save the application information.

Editing Application Permissions in Batches

1. Deploy a Service in a Project.
2. You can select multiple applications at a time.
3. Click Permissions in the batch operation area in the lower part of the page. The Permissions dialog box is displayed.
   Figure 6 Application permission management
   

4. Enable or disable Use Project Permissions as required. If it is disabled, you can set permissions for selected applications in batches.
   Figure 7 Setting role permissions for multiple applications in batches

   

5. Click OK to save the permission settings.

Editing Host Cluster Permissions

1. Deploy a Service in a Project.
2. Click Basic Resources to switch to the Basic Resources page.
3. Click Create Host Cluster. For details, see Creating a Host Cluster. Configure the basic information about the host cluster by referring to Basic information about the host cluster.
   Figure 8 Creating a host cluster
   

   Table 2 Basic information about the host cluster

   Parameter	Description
   Cluster Name	Cluster name. Enter Deploy-Test. Enter 3 to 128 characters, including letters, digits, hyphens (-), and underscores (_).
   OS	Select Linux.
   Host Connection Mode	Select Direct Connection.
   Execution Agent Pool	Select Default.
   Description	Enter the description of the host cluster. Enter 0 to 500 characters.

4. Click Save to complete the creation of basic information about the host cluster. Close the dialog box to return to the host cluster list page.
5. Click in the Operation column of the corresponding cluster and choose Assign Permissions.
   Figure 9 Cluster permissions management
   

6. In the Assign Permissions dialog box, set host cluster permissions by selecting or deselecing role permissions.
   Figure 10 Setting host cluster permissions

   

7. Close the dialog box.

Editing Environment Permissions

1. Deploy a Service in a Project.
2. Click the name of the created Deploy-Test application. The application details page is displayed.
3. Click Environment Management to switch to the environment management page.
4. Click Create Environment. The Create Environment dialog box is displayed, as shown in Creating an Environment.
   Figure 11 Creating an environment
   

5. Configure basic environment information by referring to the following table.

   Table 3 Basic host cluster information

   Parameter	Parameter Description
   Environment	Environment name. Enter Deploy-Test.
   Resource Type	Select Host.
   OS	Select Linux.
   Description	Enter the description of the environment. Max. 500 characters.

6. Click Save to complete the environment creation and close the dialog box to return to the environment list page.
7. Click the icon in the Operation column. The Permissions dialog box is displayed, as shown in Environment permission management.
   Figure 12 Environment permission management
   

8. Select or deselect role permissions based on service requirements.
   Figure 13 Setting environment permissions
   

9. Close the dialog box.