Commit Graph

354 Commits

Author SHA1 Message Date
Koushik Das 4c65b70668 Renamed delete-acl-rule -> delete-rule 2013-03-08 13:51:37 +05:30
Koushik Das aa94eca516 - Creating static routes in VNMC as part of edge firewall configuration
- Passing order parameter while creating rules so that they are evaluated in a specific order
- Added methods in VnmcResource for listing acl policies and rules belonging to variouos policies. This is used to compute order while creation of various rules in VNMC
2013-03-08 00:38:52 +05:30
Koushik Das cc824e8585 Adding appropriate ACL rules for PF and static NAT 2013-03-07 12:16:29 +05:30
Koushik Das fb23c50365 Added logic for deleting various VNMC artifacts. Added/updated relevant xmls as well. 2013-03-01 17:21:45 +05:30
Koushik Das 970c21a9a3 Added implementation for delete of asa and vnmc apis 2013-03-01 01:54:10 +05:30
Koushik Das 22e1455142 List asa api to return guest network if associated. From this it can be inferred if asa is available or not 2013-03-01 01:19:43 +05:30
Koushik Das 32223736c9 Added Vmware cluster info along with asa1kv appliance.
This is used to select the correct n1kv vsm for configuring the guest network
2013-03-01 00:50:55 +05:30
Koushik Das deed3cc951 Added support for static NAT rules.
- Xmls for creating static nat rules in VNMC
- applyStaticNats implementation in VNMC network element
- handler for static nat in resource class
2013-02-25 18:03:59 +05:30
Koushik Das 681f0b7b50 Added implementation for firewall and port forwarding rules in Cisco VNMC element class 2013-02-25 10:44:13 +05:30
Koushik Das 66b01a6589 VNMC xml for deleting NAT policy 2013-02-22 19:19:44 +05:30
Koushik Das 5d98686768 Added support for PF/DNAT rules.
Created methods in VNMCConnection class to create PF rules. Also moved out common code for PF and source NAT in methods.
Updated the corresponding VNMC resource class.
2013-02-22 19:16:41 +05:30
Koushik Das 8db2fbeb8f Added xml for creating NAT policy set in VNMC 2013-02-22 18:21:45 +05:30
Koushik Das f2da0d50ca Added VNMC XMLs for supporting PF/DNAT rules.
Also moved out some XMLs related to source NAT to common files so that these can be used for both source NAT and DNAT
2013-02-22 18:17:53 +05:30
Koushik Das 124a48819d Separated out creation of ACL policy set and policy in VNMC 2013-02-21 17:53:12 +05:30
Koushik Das 1e38515f35 Added changes to create ingress fw rules in VNMC 2013-02-21 11:54:44 +05:30
Koushik Das cb2fba9e7c Source NAT in VNMC 2013-02-14 16:23:05 +05:30
Koushik Das 720fe2f908 Fix Vnmc test file 2013-02-13 14:16:47 +05:30
Koushik Das 3fd7e30f6e Changes:
- Added implementation for add/list asa1kv APIs
- Added agent command for associating asa1kv appliance with logical edge firewall in VNMC
- Added handler for the above agent command in VNMC resource class
- Updated VNMC element class to support the above
2013-02-13 11:52:12 +05:30
Koushik Das d08e2a1faf Added lifecycle APIs for Cisco Asa 1000v appliance.
Added corresponding Dao and VO classes.
Also added mapping Dao and VO for guest netwok and asa appliance
2013-02-13 11:40:58 +05:30
Koushik Das 6b999ec867 Changes:
a. Added handlers for CreateLogicalEdgeFirewall and ConfigureNexusVSMForASA commands
b. Logic for add/list vnmc device API
c. Partial implementation for network element implement()
2013-02-12 00:05:39 +05:30
Koushik Das 0656250308 Moved VNMC provider creation to Network.java. The plugin code would have been the ideal place to keep it but current state of the code doesn't allow it. 2013-02-11 23:48:19 +05:30
Koushik Das dc402eaa7a Added new commands for the following:
a. Logical edge firewall creation in VNMC
b. Asa1kv vservice node creation and updating asa1kv inside port profile with guest network vlan id in n1kv VSM
2013-02-11 23:35:19 +05:30
Koushik Das 74de210359 Added name attribute for the VNMC lifecycle commands 2013-02-08 15:06:11 +05:30
Chiradeep Vittal 6ce25ef11d Fix licensing 2013-01-16 16:44:28 -08:00
Chiradeep Vittal 392cd8ed63 cisco-vnmc: Fix api to use new conventions 2013-01-16 16:38:19 -08:00
Chiradeep Vittal 1ae21ea49a WIP rename device to resource to better reflect nature of VNMC
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:33:01 -08:00
Chiradeep Vittal 84d218f972 WIP: fixes for associating ASA1000v to tenant
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:32:54 -08:00
Chiradeep Vittal d74c6a9ac2 WIP: fixes for associating ASA1000v to tenant
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:32:45 -08:00
Chiradeep Vittal 9350d10849 WIP: admin commands for adding / listing VNMC
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:32:29 -08:00
Chiradeep Vittal a8031a0cfe WIP ASA 1000v listing"
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:41 -08:00
Chiradeep Vittal f9cc674b9c WIP : edge firewall
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:36 -08:00
Chiradeep Vittal 6a0964af00 WIP : edge security policy
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:30 -08:00
Chiradeep Vittal e32295e8cf WIP : dhcp server policy
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:24 -08:00
Chiradeep Vittal 446a9b8491 WIP : dhcp server policy
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:18 -08:00
Chiradeep Vittal e35e0eb59b Move unit test
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:14 -08:00
Chiradeep Vittal 2b43a3e74e Move unit test
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:30:08 -08:00
Chiradeep Vittal 11b804a894 WIP: XML control of VNMC
Signed-off-by: Chiradeep Vittal <chiradeep@apache.org>
2013-01-16 15:29:54 -08:00
Murali Reddy 88a0b5ac48 Revert "Summary: partical check-in for L4-L7 network services in the shared"
This reverts commit 6657246cd4.

Reverting due to IP clearance issued for the commit done as part of CLOUDSTACK-312
2013-01-16 16:05:17 +05:30
Min Chen 8608925216 Consolidate RuntimeCloudException and CloudRuntimeException into one
class CloudRuntimeException, and removed RuntimeCloudException to avoid
confusion.
2013-01-15 18:07:08 -08:00
Rohit Yadav f6a8b45de5 ApiDiscovery: Use UserContext getCallerUser, do a lazy eval to get account service
Impl. and use UserContext to get User.
CloudStack's @Inject is horrible, it may sometimes fail to inject account service
during startup. Do a lazy injection using ComponentLocator when needed.

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-15 16:11:51 -08:00
anthony a6b9027630 default Security rule doesn't apply to system VMs since nic.getIsolationUri is not set
use to.setSecurityGroupEnabled to indicate if securitygroup is enabled on this NIC

CLOUDSTACK-983: default Security rule doesn't apply to system VMs
2013-01-15 11:15:42 -08:00
Wido den Hollander 95222cdb6d Templates: Add Ubuntu 12.04 to the templates
Although I still think the templates aren't well maintained, I just
added 12.04 since this is an LTS and people probably want it in the
list of templates.

This system should be more generic I think though.
2013-01-15 13:25:48 +01:00
Rohit Yadav bca2c928e8 PluggableService: Fix interface definition
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-14 19:01:26 -08:00
Rohit Yadav 3ec985f46f StaticRoleBased: commands.properties is actually cfg for this plugin
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-14 19:01:26 -08:00
Rohit Yadav c318561d6c ApiDiscovery: Get rid of redundant code, use apichecker to generate role based maps
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-14 19:01:26 -08:00
Rohit Yadav 896e505da6 APIChecker: Make interface generic, pass user and not just role
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-14 15:08:45 -08:00
Rohit Yadav ad063ed610 StaticRoleBasedAPIAccessChecker: Throw exception on failed check
Plugin should not be responsible for existence of checking an API, this was wrong.
Throw exception boldly when checkAccess fails.

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-11 19:24:11 -08:00
Rohit Yadav 4c80684b1f StaticRoleBasedAPIAccessChecker: Fix acl cfg processing error messages
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-11 18:44:20 -08:00
Rohit Yadav 86a77e29dc ApiDiscovery: Fix listApis to return api response, related apis etc.
- Fix method to return listApis per api name basis
- Return api response, api related cmd etc. as part of response
- Caching and processing all cmd, response classes when plugin starts, made class
  list, maps static so they are shared by multiple instances in case, takes about
  1306ms to do the processsing but only on load time
- Cache for first listApi() and return precached data thereon, takes 2.2ms
  for first call, during runtime and 0ms thereon

Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-10 22:52:10 -08:00
Rohit Yadav f170075558 ApiDiscovery: Fix response add response class that will hold api response
Signed-off-by: Rohit Yadav <bhaisaab@apache.org>
2013-01-10 22:48:56 -08:00