Zone management

3 minute read

This page displays zones currently available to CloudBees CD and provides other zone operations—create,edit, delete, and so on.

  • A zone is a way to partition a collection of agents to secure them from use by other groups. For example, you might choose to create a developers zone, a production zone, and a test zone—agents in one zone cannot directly communicate with agents in another zone.

  • A default zone is created during the CloudBees CD installation. The server implicitly belongs to the default zone, which means all agents in this zone can communicate with the server directly (without the use of a gateway).

  • Each zone can have one or more "gateway agents", which you define. Gateway agents are used for communication from one zone to another zone. For more information, see the Gateways Help topic in the Automation Platform online Help.

  • Every agent, and all resources defined on that agent, can belong to one zone only.

  • Within a zone, agents can be either trusted or untrusted .

  • Trusted—The CloudBees CD server verifies the agent’s identity using SSL certificate verification.

  • Untrusted—The CloudBees CD server does not verify agent identity. Potentially, an untrusted agent is a security risk.

  • To create a new zone, click the Create Zone link.

  • The "star" icon allows you to save this zone information to your Home page.

Column descriptions

Column Name Description / Actions

Name

The name supplied when this zone was created. Click on a Zone Name to see the Zone Details panel for that zone.

Descriptions

(Optional) Plain text or HTML description for this object. If using HTML, you must surround your text with <html> …​ </html> tags. Allowable HTML tags are <a>, <b>, <br>, <div>, <dl>, <font>, <i>, <li>, <ol>, <p>, <pre>, <span>, <style>, <table>, <tc>, <td>, <th>, <tr>, and <ul>.

For example, the following HTML:

<p>
<span style="font-family: Arial;">
  <i>Note:</i> For more information about the <b>abc</b> object, see
         <a href="https://www.google.com/">\https://www.google.com</a>.
</span>
</p>

renders as follows:

<i>Note</i>: For more information about the <b>abc</b> object, see \https://www.google.com.

Actions

Delete —Use this link to delete the zone on the same row.

Deleting a zone does not delete resources in the zone. All agents (and their respective resources) move to the default zone if their current zone is deleted. The default zone cannot be deleted.

Zone Details panel

This panel displays the zone name and description for the zone you selected.

  • Resources —Displays a list of resources in the zone.

  • Edit —Opens the Edit Zone panel.

    On this panel, you can change the zone name, or you can add or change the zone description. Click OK after making any changes.

  • Access Control —Opens the Access Control page for this zone.

  • Current access privileges are displayed, if any.

  • Add the access control privileges you need for this zone.

Select the Properties tab to view any properties created for this zone, or use the "create" property links to create properties for this zone.

Creating a new zone

Enter information into the fields as follows:

Field Name Description

Name

Enter a name of your choice for this zone. The name must be unique among other zone names.

Description

(Optional) Plain text or HTML description for this object. If using HTML, you must surround your text with <html> …​ </html> tags. Allowable HTML tags are <a>, <b>, <br>, <div>, <dl>, <font>, <i>, <li>, <ol>, <p>, <pre>, <span>, <style>, <table>, <tc>, <td>, <th>, <tr>, and <ul>.

For example, the following HTML:

<p>
<span style="font-family: Arial;">
  <i>Note:</i> For more information about the <b>abc</b> object, see
         <a href="https://www.google.com/">\https://www.google.com</a>.
</span>
</p>

renders as follows:

<i>Note</i>: For more information about the <b>abc</b> object, see \https://www.google.com.

Click OK to see your new zone displayed in the table. To add resources to this zone, go to the Resources page.

Access Control notes

A zone inherits privileges from the ZonesAndGateways ACL. See Access Control for more information.

Resource and Resource Pool inherit their privileges from Resources privileges. To create a resource, you must have modify privileges on Resources, and you must have modify privileges on the zone.

In addition, to move a resource from one zone to another, you must have modify privileges on both zones and the resource you want to move.