Commit Graph

809 Commits

Author SHA1 Message Date
Chiradeep Vittal fbfb1b8f5b move interval to listener -- allows it to be configurable if needed 2011-09-07 13:58:49 -07:00
Chiradeep Vittal 2027049fd6 if the xenserver host cannot do bridge firewalling do not attempt to retry the security rule updat 2011-09-07 13:58:49 -07:00
Chiradeep Vittal 1ddda37e13 enable logging of the management server id 2011-09-07 13:58:48 -07:00
Chiradeep Vittal b7c1296534 make signature calculation consistent across management servers 2011-09-07 13:58:48 -07:00
Chiradeep Vittal d6448d9fb8 useful logging 2011-09-07 13:58:47 -07:00
kishan 3a6c226bc9 bug 11345: Compare current and previous network stats before updating. Ignore stats if the current stats are not same as the prev stats. Set NetworkUsageAnswer log level to debug 2011-09-07 13:16:11 +05:30
Kelven Yang a7ac75f920 bug 11304: restore host status after initialization failure 2011-09-02 15:17:57 -07:00
alena 78b2df8549 Do account permission checks for snapshots the way it's done for all other ControlledEntities 2011-08-31 17:53:48 -07:00
prachi 089b23f7a6 Bug 9921 - template tags
Changes:
- CreateTemplate and RegisterTemplate now support adding a template tag. It is a string value. This is root-admin only action - only admin can add template tags.
- ListTemplates will return the template tag in response.
- HostAllocator changed to use template tag along with the existing tag on service offering. If both tags are present, allocator now finds hosts satisfying both tags. If no hosts have both tags, allocation will fail.
- DB changes to add new column to vm_template table.
- DB upgrade changes for upgrade from 2.2.10 to 2.2.11

Conflicts:

	server/src/com/cloud/api/ApiResponseHelper.java
	server/src/com/cloud/template/TemplateAdapterBase.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
2011-08-25 15:18:18 -07:00
alena 1ea383e96f bug 11260: Take networkRate for domR's guest and public interface from the corresponding system service offering 2011-08-25 14:13:23 -07:00
prachi 1baf90b18b Bug 11261 - Allow to update host tags
Changes:
- Changes to updateHostCmd to accepts hosttags parameter
- Changes to wipe out existing tags and save new ones in host_tags DB.
- UpdateHost is Admin only operation - so only root admin can update host tags
2011-08-25 12:58:37 -07:00
alena e902599847 bug 11185: support multiple CIDR on overlapping port ranges for firewall rules
status 11185: resolved fixed

Conflicts:

	server/src/com/cloud/network/firewall/FirewallManagerImpl.java
2011-08-25 12:06:28 -07:00
Edison Su 7b034a68c0 TESTClient: more features: all the api will go through 8080 with apikey/securitykey, both keys are generated dynamically when you deploy your setup, add list/map type for api, and bug fix 2011-08-24 18:45:11 -07:00
alena 488b995299 bug 11236: domainAdmin/regularUser can edit/delete/copy/extract Public template/iso only if it was created by them. They still can use/see public template/iso when execute list/deploy/attachIso commands. Root admin can operate with other people templates w/o any restrictions.
status 11236: resolved fixed
2011-08-24 14:48:22 -07:00
alena ac47c87c40 bug 11204: when search for domR/dhcp, include Role to the corresponding search to eliminate getting "LB" network element in the response
status 11204: resolved fixed
2011-08-23 12:00:50 -07:00
alena c2732850f4 bug 11202: added "networkRate" param to service offering api responses 2011-08-22 13:35:43 -07:00
alena 033765f93f Added networkRate parameter to createServiceOffering api command 2011-08-22 12:02:08 -07:00
frank 32ee2dbe2c Remove baremetal specific parameters from AddHostCmd 2011-08-19 17:12:23 -07:00
frank 18f87c2108 Merge branch 'cvm' into 2.2.y
Conflicts:
	api/src/com/cloud/api/BaseCmd.java
	cloud.spec
	core/src/com/cloud/storage/template/DownloadManagerImpl.java
	server/src/com/cloud/agent/manager/AgentManagerImpl.java
	server/src/com/cloud/configuration/DefaultComponentLibrary.java
	server/src/com/cloud/deploy/FirstFitPlanner.java
	server/src/com/cloud/host/dao/HostDao.java
	server/src/com/cloud/network/security/SecurityGroupListener.java
	server/src/com/cloud/storage/StorageManagerImpl.java
	server/src/com/cloud/storage/listener/StoragePoolMonitor.java
	server/src/com/cloud/vm/UserVmManagerImpl.java
	server/src/com/cloud/vm/VirtualMachineManagerImpl.java
	utils/src/com/cloud/utils/SerialVersionUID.java
2011-08-19 16:08:35 -07:00
Edison Su ea102aa045 add host guid in migrate command 2011-08-18 11:03:40 -07:00
alena 5fd0ff5610 Added missing license headers 2011-08-15 14:24:28 -07:00
alena d72200bbfc If one of the static nat rules failed to apply on the backend, the end result should be false 2011-08-15 10:18:44 -07:00
alena 891f02f4d4 Resend firewall rules on domR restart 2011-08-15 10:18:10 -07:00
alena 803255b0ba bug 11029: db upgrade from 2.2.9 to 2.2.10 includes firewall_rule upgrade now
status 11029: resolved fixed

Commit also includes the following:

* map firewall rule to pf/lb/staticNat/vpn when the firewall rule is created as a part of pf/lb/staticNat/vpn rule creation
* when delete firewall rules, also delete related firewall rule
2011-08-15 10:18:09 -07:00
Murali Reddy cc60989a68 bug 10923: changes for snapshot command to carry primary storage pool path 2011-08-12 17:43:18 +05:30
Nitin 5ef0c96e70 bug 11096: ExtractTemplate - For private template choose the correct sec storage host id since its not present in all the sec storage now. 2011-08-12 14:30:34 +05:30
Chiradeep Vittal ba3bb68035 fix merge issues 2011-08-11 16:53:08 -07:00
Chiradeep Vittal 51af0db682 mass merge 2.2.10 2011-08-11 16:41:52 -07:00
keshav df5f48c093 Added parameter to enable the firewall rule UI to the list capabilities API. 2011-08-11 12:03:06 -07:00
keshav d47eb46faf Added parameter to enable the firewall rule UI to the list capabilities API. 2011-08-11 11:42:02 -07:00
Alex Huang 1079a77024 bug 11043: rverted the bad fix 2011-08-11 10:27:02 -07:00
Alex Huang 15f86d3d93 bug 11043: rverted the bad fix 2011-08-11 10:25:31 -07:00
alena 278f2a401f bug 10561: intermediate checkin for enable/disableStaticNat.
1) On enableStaticNat command we actually send the command to the backend (we used to just upgrade the DB in the past). The backend command carries sourceIp and destIp, and creates IP to IP mapping on the domR.
2) On disableStaticNat for the Ip address in addition to cleaning up port ranges, we also delete IP to IP mapping on the domR.
2011-08-11 10:19:22 -07:00
Naredula Janardhana Reddy 7c2395e684 bug 10561: fix: last entry in the firewall rules unable to delete 2011-08-11 19:01:36 +05:30
Chiradeep Vittal 375da4da1a bug 11072: icky icky icky 2011-08-10 20:40:13 -07:00
Chiradeep Vittal d29b01ca7f bug 10561: backend rules for firewall 2011-08-10 18:39:52 -07:00
alena dc116d99a8 Get ipAddress info not from the rule, but from the request parameter ipAddressId 2011-08-10 16:47:15 -07:00
Sheng Yang e1de9f5bec bug 11021: Add ReservationStrategy.Managed to prevent sourceNat from release
status 11021: resolved fixed
2011-08-10 12:52:19 -07:00
Sheng Yang 58a13c0d5a bug 11021: Add ReservationStrategy.Managed to prevent sourceNat from release
status 11021: resolved fixed
2011-08-10 12:51:43 -07:00
alena 32b53351ff Fixed response processing in createFirewallRule command 2011-08-10 11:36:34 -07:00
Naredula Janardhana Reddy a9eb14c42e bug 10561: backend added for CreateFirewallRule and deleteFirewallRule 2011-08-10 17:06:42 +05:30
Abhinandan Prateek 949ad3f4c4 bug 10561: readding source cidr changes to firewall rules 2011-08-10 13:55:37 +05:30
Abhinandan Prateek 9bba09857e bug 10561: readding source cidr changes to firewall rules 2011-08-10 13:52:42 +05:30
alena e4967c4631 Fixed typos in api doc for listFirewalls command 2011-08-09 09:58:38 -07:00
Chiradeep Vittal 779ca9ac1a fix associate ip exception 2011-08-09 09:53:22 -07:00
Abhinandan Prateek 311afeae23 bug 10731: reverting back source cidr changes for loadbalancer and portforwarding 2011-08-09 16:01:48 +05:30
Chiradeep Vittal 301bf049d1 fix compile issues 2011-08-08 22:03:08 -07:00
Chiradeep Vittal 924961d898 merge nectarine 2011-08-08 21:45:37 -07:00
alena 06d007337a bug 10561: intermidiate checkin for FirewallRuleFeature
1) Added new apis: createFirewallRule, deleteFirewallRule, listFirewallRules
2) Modified existing apis - added boolean openFirewall parameter to createPortForwardingRule/createIpForwardingRule/createRemoteAccessVpn. If parameter is set to true, open firewall on the domR before creating an actual PF rule there
Modified backend calls appropriately.
3) Schema changes for firewall_rules table:
* startPort/endPort can be null now
* added icmp_type, icmp_code fields (can be not null only when protocol is icmp)
4) Added new manager - FirewallManagerImpl
2011-08-08 20:59:40 -07:00
Kelven Yang 39a3d82f11 Add prepareTemplate command(admin only) to allow pre-loading template into primary storage 2011-08-08 18:37:26 -07:00