Commit Graph

23229 Commits

Author SHA1 Message Date
Sanjay Tripathi 149cb33e3c CLOUDSTACK-6479: Strict and Preferred modes should only be allowed in Implict Dedication Planner Service Offerings. 2014-05-05 14:25:23 +05:30
Rajesh Battala 144990df11 Fixed testSetupGuestNetwork unit test as the SetupGuestnetwork prepare command got changed 2014-05-05 13:30:57 +05:30
Rajesh Battala cf41ccaa5b CLOUDSTACK-6518 [Hyper-V] Efficient way of finding the empty nic in VR/VpcVR to configure VPC entities 2014-05-05 12:59:24 +05:30
Rajesh Battala 6cd1c7ab32 CLOUDSTACK-6528 SetupGuestNetwork command is not deleting the guest network configured on the eth device 2014-05-05 12:59:11 +05:30
Harikrishna Patnala 508e3e2c9b CLOUDSTACK-6466: cpu and ram is not getting updated correctly in usage_vm_instance table for usage type 2 2014-05-05 12:11:35 +05:30
Harikrishna Patnala ce3074e9a2 CLOUDSTACK-6463: password is not set for VMs created from password enabled template 2014-05-05 12:11:28 +05:30
Bharat Kumar 489bb0c7ed Cloudstack-5077: reserve cpu and memory only when vmware.reserve.cpu/mem are set to true. Insted of setting the ovecommit values to one on upgrade, we popultate them from the global values.
Conflicts:
	engine/schema/src/com/cloud/upgrade/dao/Upgrade410to420.java
	engine/schema/src/com/cloud/upgrade/dao/Upgrade420to421.java
	plugins/hypervisors/vmware/src/com/cloud/hypervisor/vmware/resource/VmwareResource.java
2014-05-05 11:32:51 +05:30
Girish Shilamkar d81c5c44f1 Revert "CLOUDSTACK-6257: Adding function to check state of VM"
This reverts commit 1be8b87fb7.
2014-05-05 11:23:27 +05:30
Girish Shilamkar 658168075e Revert "Added missing strings in codes.py"
This reverts commit c7c10f5220.
2014-05-05 11:23:16 +05:30
Girish Shilamkar 9f314c69a0 CLOUDSTACK-6559: Added listall=True to list vm API 2014-05-05 11:08:06 +05:30
ynojima 03156ecd6f CLOUDSTACK-6571 bugfix: 'service cloudstack-agent stop' fails to stop the process started on boot 2014-05-04 21:23:31 -06:00
Daan Hoogland c9e201229e Revert "Add OpenContrail support to devCloud environment"
This reverts commit 5c2ddb2488.
2014-05-04 21:15:08 +02:00
Sachchidanand Vaidya df32c86a17 - Created new devcloud advanced networking config file (devcloud-advanced_juniper-contrail.cfg). - Modification to deployDataCenter script, to enable "JuniperContrailRouter" & "JuniperContrailVpcRouter" providers.
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-04 21:14:26 +02:00
Sachchidanand Vaidya 5c2ddb2488 Add OpenContrail support to devCloud environment
Signed-off-by: Daan Hoogland <daan@onecht.net>
2014-05-04 21:09:45 +02:00
Mike Tutkowski 0cdcab26f5 CLOUDSTACK-6170 Corrected an issue related to the "Reinstall VM" command and managed storage with VMware 2014-05-02 18:31:14 -06:00
Min Chen ffec3d0284 CLOUDSTACK-6568:API:createVolume: Volume gets created with wrong domain
ID.
2014-05-02 16:29:34 -07:00
Min Chen 03f6188c1c CLOUDSTACK-6569: IAM - Regular user is able to listNetworks of another
user in the same domain , by passing account and domainId.
2014-05-02 14:53:44 -07:00
Alena Prokharchyk 4e7498bc08 LOUDSTACK-6475: cleanupVPC task - removed the transaction wrapping up multiple VPC destroy as the destroy operation has external calls, to prevent long-locked transaction.
Reviewed-by: Prachi Damle
2014-05-02 14:20:27 -07:00
Sam Schmit fe84b674c1 CLOUDSTACK-6472 listUsageRecords: Pull information from removed items as well, fixing NPEs/Null UUIDs with usage API calls. 2014-05-02 16:36:37 -04:00
Sebastien Goasguen f328f6157b Review from pyr https://reviews.apache.org/r/20557/ 2014-05-02 16:35:46 -04:00
Girish Shilamkar c7c10f5220 Added missing strings in codes.py 2014-05-02 23:24:00 +05:30
Gaurav Aradhye 1be8b87fb7 CLOUDSTACK-6257: Adding function to check state of VM
Conflicts:
	tools/marvin/marvin/integration/lib/base.py
2014-05-02 23:19:35 +05:30
Murali Reddy d5374ed650 CLOUDSTACK-6564: OVS distributed routing: use file based OF rule updates
use ovs-ofctl replace flows by file name option to update the OF rules
instead of sequenetially configuring the rules.
2014-05-02 18:52:47 +05:30
Sateesh Chodapuneedi ce7a689ae1 CLOUDSTACK-6317 [VMware] Tagged VLAN support broken for Management/Control/Storage traffic
Check if switch name detected from traffic label for management, storage, control traffic is null before falling back to default value.

Signed-off-by: Sateesh Chodapuneedi <sateesh@apache.org>
2014-05-02 18:36:09 +05:30
Koushik Das 362f89b9e1 CLOUDSTACK-6445: Minor fixes in vm ha test 2014-05-02 17:29:23 +05:30
ynojima fa4e7fc7f7 CLOUDSTACK-6351 bugfix: Java1.6 is installed instead of Java7
Since epoch spesicifation doesn't work on RHEL6.3,
"java7" is used in the rpm spec.

Conflicts:
	packaging/centos63/cloud.spec
2014-05-02 00:19:50 -06:00
Prachi Damle 2e5b529157 CLOUDSTACK-6560: IAM - Admin user is denied permission to create Egress rule for a user's network
Changes:
- CS 4.3 handled Network entity in two ways:
a) Specified "UseNetwork" access and did a strict check w.r.t who can use this network. Regular users and Domain Admin went through the strict check. Root admin got access always.
b) Specified "null" access and that meant admins can access this network for the calling API that passes null access.

- Fixing CS 4.4 IAM to handle this behavior:
a) "UseNetwork" is mapped to "UseEntry" and IAM check will be done only for domain admin and regular users when this access is specified. Root Admin is grated access.
b) If "null" access is specified, root and domain admin both are granted access. Regular users still go through IAM.
2014-05-01 16:07:52 -07:00
Prachi Damle e89c628843 CLOUDSTACK-6558 IAM - Admin user is able to deploy VM in a regular user's Security Group.
Changes:
- Even for SecurityGroup, go through IAM to do permission checks for all type of accounts
2014-05-01 16:07:50 -07:00
Brian Federle 430d14b676 CLOUDSTACK-6438: Filter out existing IPs in dropdown 2014-05-01 15:49:37 -07:00
Brian Federle 7daabf6515 CLOUDSTACK-6438: WIP: Add filtering to check against existing IPs 2014-05-01 15:49:33 -07:00
Brian Federle 0b03609c45 CLOUDSTACK-6438: WIP: If VM has additional IPs, keep showing in add screen 2014-05-01 15:49:28 -07:00
Min Chen 6435b261de CLOUDSTACK-6556: Deploy VM failing with error "does
not have permission to access resource Ntwk".
2014-05-01 15:07:36 -07:00
Min Chen f0edfc7ac5 CLOUDSTACK-6535: IAM:MS:API createVMSnapshot doesn't preserve access
rights.
2014-05-01 12:13:59 -07:00
Wido den Hollander 355f1a2a75 CLOUDSTACK-4549: Do not force RBD snapshot backups to RAW format
Since we use qemu-img to copy from RBD to Secondary Storage we no
longer have to force to RAW images, but can stick with QCOW2

When the snapshot backups are QCOW2 format they can easily be deployed
again when restoring from a backup

Conflicts:

	plugins/hypervisors/kvm/src/com/cloud/hypervisor/kvm/storage/LibvirtStorageAdaptor.java
2014-05-01 21:04:04 +02:00
Min Chen 4415aee1e9 CLOUDSTACK-6556: [Automation] Deploy VM failing with error "does not
have permission to access resource Ntwk".
2014-05-01 11:33:41 -07:00
Min Chen ef2616bfda CLOUDSTACK-6443: [Automation] Two Test Cases failed on "test_volumes.py"
- AttributeError: VirtualMachine instance has no attribute 'hostid'.
2014-05-01 10:05:16 -07:00
Daan Hoogland 9c2768756c CLOUDSTACK-6549: ommission due to insufficient tests in CLOUDSTACK-6231 2014-05-01 09:42:54 +02:00
Prachi Damle e14c2ec724 CLOUDSTACK-6517: IAM - Admin is allowed to create PortFowarding rule for a regular user, when admin does not have " UseEntry" permission for IpAddress.
Changes:
- IAM was applying ordering on accessTypes. Thus if an account had Operate, he got USe access as well. So even if IAM schema did not have 'UseEntry" permission for IpAddress, some other 'OperateEntry' permission on IpAddress was letting this operation go through.
- Fixed IAM to NOT do ordering of access types anymore. IAm will perform strict accessType check only.
- This fix is needed so that admin does not get permission to USE resources from other account just becase he has OPERATE access on those resources due to some other APIs.

- However due to this fix, we break backwards compatibilty with CS 4.3.
- CS 4.3 allowed root admin to do the createPF operation for a user by passing in networkId of the user.
- Same was the case for domain admins within their domains
- Why this worked was due to CS 4.3 simply returning true for root admin/domain admin

- So to maintain backwards compatibilty, we are adding the logic to return "true" for root admin and domain admin just like CS 4.3.
- Exception is: For Network, AffinityGroup and Templates, we still call IAM even for root admin/domain admin, since thats what CS 4.3 did. Just for these 3 resource_types, it used to perform access checks even for root admin/domain admin.
2014-04-30 11:58:21 -07:00
Min Chen 42b803dd4b CLOUDSTACK-6502:Remove trailing whitespaces. 2014-04-30 10:20:12 -07:00
Min Chen 412793f9b4 CLOUDSTACK-6513: remove commented code. 2014-04-30 10:03:06 -07:00
Daan Hoogland 3852afa717 CLOUDSTACK-6231: network acl item cidrs loaded from a seperate table 2014-04-30 14:55:56 +02:00
Min Chen 3af2f6d141 CLOUDSTACK-6513: templateFilter=shared should not show self-owned
template.
2014-04-29 19:02:57 -07:00
Min Chen 7309146f9f CLOUDSTACK-6513: Optimize code by removing deprecated utility to
QueryManagerImpl as private method just used for listTemplates and
listAffinityGroups to avoid misuse by new list APIs.
2014-04-29 18:33:10 -07:00
Min Chen 0767060b1f CLOUDSTACK-6532:Affinity Groups - As admin user, not able to list all
affinity groups available for regular users by passing account and
domainId paramater. This is to revert IAM way of implementing
listAffinityGroupsCmd, will bring it back when we have implemented real
impersonation.
2014-04-29 18:08:00 -07:00
Min Chen b2b59ed83a CLOUDSTACK-6533: IAM - Templates - Public templates do not have
permissions to be used by ROOT group.
2014-04-29 11:49:16 -07:00
Anthony Xu 1b74f3f3c8 disable XS event 2014-04-29 11:48:12 -07:00
Rajesh Battala d55bf1efae Removed Epoch tag/number from the cloud.spec to fix the rpm installation of Management Server, Agent and awsapi 2014-04-29 17:19:39 +05:30
Rajani Karuturi 08ec6ebdda Fixed CLOUDSTACK-6509 Cannot import multiple LDAP/AD users into a cloudstack account
Conflicts:
	api/src/com/cloud/user/AccountService.java
	plugins/user-authenticators/ldap/src/org/apache/cloudstack/api/command/LdapCreateAccountCmd.java
	plugins/user-authenticators/ldap/src/org/apache/cloudstack/api/command/LdapImportUsersCmd.java

Signed-off-by: Koushik Das <koushik@apache.org>
2014-04-29 14:38:32 +05:30
Mike Tutkowski 934056097a CLOUDSTACK-6170 Needed to add logic for XS 6.2 + XS62ESP1 + XS62ESP1004 2014-04-28 23:31:08 -06:00
Koushik Das de114f5548 CLOUDSTACK-4371: [Performance Testing] Basic zone with 20K Hosts, management server restart leaves the hosts in disconnected state for very long time
Fixed simulator code to handle local storage during host reconnect
2014-04-29 09:59:33 +05:30