78213da828
appliance: use Debian 11.8.0 and systemvm version to 4.19.0 ( #8084 )
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2023-11-02 16:50:03 +01:00
29c7b3167e
cloudstack: bump to use 4.18.1.0 systemvmtemplate ( #7828 )
...
* cloudstack: bump to use 4.18.1.0 systemvmtemplate
Use new 4.18.1.0 systemvmtemplate
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
* fix cd ISO url
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
---------
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2023-08-11 07:38:47 +02:00
4138ca7c5d
systemvmtemplate: fix Debian 11.7.0 ISO URL
...
Fixes systemvmtemplate build issue
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2023-05-25 22:15:28 +05:30
d52e4d72b6
systemvmtemplate: update Debian ISO URL and checksum ( #7013 )
...
This fixes packer systemvmtemplate build
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-12-23 11:26:38 +05:30
5516f74fce
systemvm: fix management route ( #6921 )
...
Fixes #6873
When the management server is in a different subnet than the pod in which a VPC VR is deployed, an ip route must be added just after creation of eth0 to allow the connectivity between the VR and the management server.
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2022-12-12 17:41:54 +05:30
4a914aa88d
network: ipv6 static routes ( #5786 )
...
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* IPv6: configure VR of isolated networks
* IPv6: add default IPv6 route in VR of isolated networks
* Reformat server/src/main/java/com/cloud/network/NetworkServiceImpl.java
* IPv6: update network to offering which support IPv6
* IPv6: update vm nic ipv6 address when update network to new offering
* IPv6: configure VPC VR to support multiple tiers with IPv6
* IPv6: add RDNSS in radvd.conf
* IPv6/UI: support ipv6 protocols in Network ACL
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes for diagnostics
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* more import fromo #5594
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* IPv6: fix wrong public ipv6 in VPC VR
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* Update server/src/main/java/com/cloud/configuration/ConfigurationManagerImpl.java
Co-authored-by: dahn <daan.hoogland@gmail.com>
* ui: fix add ipv6 prefix labels, message
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: label fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* logging fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* minor ui refactor
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ip6 events
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ip6 usage
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* unused
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* slaac based public ip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove unused
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* diagnostics fix for vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* firewall changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* alert and show ipv6 usage
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* change for network response
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ipv6 network test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix ipaddress listing
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix simulator
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* changes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test and fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test temp change revert
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* use uuid
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* event syntax fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* wip
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* review comments
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* assign vlan public IP for dualstack only if both protocols present on same vlan
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* internetprotocol in networkofferingresponse
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add tcp, udp
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* support vpc with ipv6 only on same vlan
- adds new internet protocol param to createVpcOffering API
- When DualStack internet protocol is selected for the VPC offering, tiers with network with or without IPv6 support can be deployed.
- When IPv4 internet protocol is used for the VPC offering, tiers with network with only IPv4 support can be deployed
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* change and fix
allow VPC with IPv4 protocol to deploy tiers with IPv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test fix
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui fixes
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix multiple routes, network guest ipv6 gateway
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* address review comments
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* stop radvd on backup VR
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix router redundant status with ipv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* disable radvd for backup vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* correctly set ipv6 in redundant router case
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove unused code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix connection
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: don't show all protocol for egress
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix guest ipv6 for redundant VRs
Redundant VRs will not be assigned an IPv6 by ACS and guest netwrok gateway will be added as IPv6 for guest interface by systemvm scripts during setting redundant state of the VR.
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix missing ipv6 on redundant vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix syntax
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix vpc tier redirect to show details
When redirecting to VPC tier, details tab should be active by default
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* restart radvd on primary redundant vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* check for ipv6 values
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove old ui change
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix condition
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* remove gateway from backup vr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* network upgrade fail early
when IPv6 network cannot be allocated fail before shutting down the network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix radvd not running on RVR
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* prepare radvd.conf once
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix job polling
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix RVR for vpc with ipv6
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ipv6 network acls
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* Update CsConfig.py
* add check
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: vpc offering test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: add negative tests for guest prefix, public range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add default ipv6 route for primary
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix dadfailed on vpc rvr
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix add iprange form, dedicate action visibility
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix adding, deleting ipv6 range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix failing test
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix missing destination cidr in ipv6 firewall
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ipv6 nftables rules
Allow storing linger IPv6 CIDRs in DB
Specify all port range for TC{, UDP protocol rules withot ports
Fix adding nft rules by creating chains first
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix icmpv6 type, code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix icmp type, code
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test: add more for ipv6 network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* add warning message for egress policy in ipv6 fw rule
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui,server: update ipv6 vlan range
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* subnet operations inside transaction
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* server: persistent public IPv6 for network
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* ui: fix action alignment
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix vpc acl for tiers
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix removing network placeholder nic
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix acl rules for ip version
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix placeholder nic and nd-neighbor block issue
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* test for redundant nw
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* fix ping
Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>
* systemvm: uprgade to debian 11.3.0
* ipv6: enable ipv6 in sysctl config in bootstrap.sh
* VR: fix KeyError: 'nic_ip6_cidr'
* build fix for latest event changes
Signed-off-by: Abhishek Kumar <abhishek.kumar@shapeblue.com>
Co-authored-by: Wei Zhou <weizhou@apache.org>
Co-authored-by: dahn <daan.hoogland@gmail.com>
2022-04-25 22:51:32 -03:00
e0a5df50ce
CKS Enhancements and SystemVM template upgrade improvements ( #5863 )
...
* This PR/commit comprises of the following:
- Support to fallback on the older systemVM template in case of no change in template across ACS versions
- Update core user to cloud in CKS
- Display details of accessing CKS nodes in the UI - K8s Access tab
- Update systemvm template from debian 11 to debian 11.2
- Update letsencrypt cert
- Remove docker dependency as from ACS 4.16 onward k8s has deprecated support for docker - use containerd as container runtime
* support for private registry - containerd
* Enable updating template type (only) for system owned templates via UI
* edit indents
* Address comments and move cmd from patch file to cloud-init runcmd
* temporary change
* update k8s test to use k8s version 1.21.5 (instead of 1.21.3 - due to https://github.com/kubernetes/kubernetes/pull/104530 )
* support for private registry - containerd
* Enable updating template type (only) for system owned templates via UI
* smooth upgrade of cks clusters
* update pom file with temp download.cloudstack.org testing links
* fix pom
* add cgroup config for containerd
* add systemd config for kubelet
* add additional info during image registry config
* update to official links
2022-02-15 18:27:14 +05:30
6ac834a358
Adding AutoScaling for cks + CKS CoreOS EOL update + systemvmtemplate improvements ( #4329 )
...
Adding AutoScaling support for cks
Kubernetes PR : kubernetes/autoscaler#3629
Also replaces CoreOS with Debian
Fixes #4198
Co-authored-by: Pearl Dsilva <pearl1594@gmail.com>
Co-authored-by: Pearl Dsilva <pearl.dsilva@shapeblue.com>
Co-authored-by: Wei Zhou <w.zhou@global.leaseweb.com>
Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2021-10-06 21:17:41 +05:30
69a0ab665d
systemvmtemplate: bump to Debian 11.0.0 systemvmtemplate ( #5317 )
...
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2021-08-18 16:47:08 +05:30
1c29163060
appliance: compatibility fix for Packer v1.7.4, update debian template to 10.10.0 ( #5304 )
2021-08-16 13:44:58 +05:30
9b1d1e6de3
systemvmtemplate: new template for 4.15.1 ( #4793 )
...
Update new systemvmtemplate for 4.15.1.0; synced:
http://download.cloudstack.org/systemvm/4.15/
A new template is necessary due to many security fixes over the last year, the 4.15.0 systemvmtemplate was created about a year ago.
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
Co-authored-by: Pearl Dsilva <pearl.dsilva@shapeblue.com>
2021-03-24 17:08:46 +05:30
29fb74538b
appliance: Host SSVM Debian ISO on download.cloudstack.org ( #4249 )
...
This way we do not depend on Debian keeping the ISO online or changing
URLs which can break our build system(s).
2020-08-07 13:03:43 +05:30
1a2cc40905
systemvmtemplate: Update debian 10 iso to 10.5.0 ( #4243 )
...
Debian 10.4.0 is not available, therefore SystemVM templates will fail to build with a missing iso.
Fixed updating with the Debian 10.5.0 iso located at https://cdimage.debian.org/debian-cd/current/amd64/iso-cd/
2020-08-06 15:57:17 +05:30
1e19ea5bdd
systemvmtemplate: move to using Debian10 ( #4104 )
...
This upgrades the systemvmtemplate base to Debian 10 with openjdk-11 and a newer strongswan package.
Fixes #3654
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2020-06-09 08:20:51 +05:30
d90341ebf1
cloudstack: add JDK11 support ( #3601 )
...
This adds support for JDK11 in CloudStack 4.14+:
- Fixes code to build against JDK11
- Bump to Debian 9 systemvmtemplate with openjdk-11
- Fix Travis to run smoketests against openjdk-11
- Use maven provided jdk11 compatible mysql-connector-java
- Remove old agent init.d scripts
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2020-02-12 12:58:25 +05:30
d43b499429
systemvmtemplate: Fix Debian 9 iso url ( #3582 )
...
Since version 10.0.0 of Debian has become stable, the URL of the Debian 9.9.0 ISO files has changed from current to archive.
The old URL returns a 404 and crash the build of systemvm templates.
2019-09-10 09:21:05 -07:00
9ff819da2c
systemvm: new qemu-guest-agent based patching for KVM ( #3278 )
...
This introduces a new patching script for patching systemvms on KVM
using qemu-guest-agent that runs inside the systemvm on startup. This
also removes the vport device which was previously used by the legacy
patching script and instead uses the modern and new uniform guest
agent vport for host-guest communication.
Also updates the sytemvmtemplate build config to use the latest Debian
9.9.0 iso.
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2019-05-10 23:42:19 +05:30
4d8e75cec8
systemvmtemplate: update debian 9.6 iso url and checksum ( #3022 )
...
This fixes the failing systemvmtemplate build due to 404 on old ISO url.
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2018-11-13 06:30:09 +05:30
263559c19e
systemvmtemplate: Bigger partition size and ambiguous redirect bugfix ( #2832 )
...
Fix partition sizes to allow the building of systemvmtemplate, and fix ambiguous redirect fix.
2018-08-31 17:17:51 +05:30
52fb426231
systemvm: Update ISO URLs to the latest ( #2747 )
...
Update ISO URLs to the latest as the old URLs are broken. Base template updated for Debian 9.5.0.
2018-07-26 13:06:08 +05:30
986ecfa7e9
CLOUDSTACK-10341: Reduce systemvmtemplate size, install nftables ( #2506 )
...
This reduces systemvmtemplate size by 600MB and installs nftables,
updates iptables. This also fixes a failing smoke test.
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2018-03-28 13:11:51 +05:30
7112affe19
Bump the version of Debian net-installer to 9.4.0 ( #2485 )
2018-03-13 09:46:42 +01:00
d19629a115
CLOUDSTACK-10013: Fixes based on code review and test failures
...
This includes test related fixes and code review fixes based on
reviews from @rafaelweingartner, @marcaurele, @wido and @DaanHoogland.
This also includes VMware disk-resize limitation bug fix based on comments
from @sateesh-chodapuneedi and @priyankparihar.
This also includes the final changes to systemvmtemplate and fixes to
code based on issues found via test failures.
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2017-12-23 17:51:42 +05:30
3839239a21
CLOUDSTACK-10194: Use packer for building systemvmtemplates
...
- This migrates the current systemvmtemplate build system from
veewee/virtualbox to packer and qemu based.
- This also introduces and updates a CentOS7 built-in template.
- Remove old appliance build scripts and files.
- Adds iftop package (CLOUDSTACK-9785)
Signed-off-by: Rohit Yadav <rohit.yadav@shapeblue.com>
2017-12-23 09:22:44 +05:30
Rohit Yadav
Abhishek Kumar
Abhishek Kumar
Pearl Dsilva
davidjumani
Pierre-Luc Dion
Wido den Hollander
Gabriel Beims Bräscher
David Passante
Rohit Yadav
Dennis Konrad
Khosrow Moossavi