Alena Prokharchyk
4e5355b192
VPC: CS-15519 - fixed ipAssoc when only zoneId parameter is passed in to the API call
2012-07-10 15:15:30 -07:00
Sheng Yang
37a0ef7375
CS-15512: Fix delete vpn connection
2012-07-10 14:47:27 -07:00
Alena Prokharchyk
3caffc7855
VPC: CS-15345 - fixed regression in ipRelease happening as a part of cleanupNetworkResources method
2012-07-10 14:33:24 -07:00
Sheng Yang
8212de6f94
CS-15513: Fix group 5 of s2s vpn
2012-07-10 10:31:25 -07:00
Alena Prokharchyk
08b9b3bc5b
VPC: CS-15505 - allocate guest nics when new VR starts in VPC
2012-07-09 18:08:44 -07:00
Alena Prokharchyk
e8658c9525
VPC: CS-15481: don't allow creating networkACLs for overlapping cidrs/ports
2012-07-09 16:24:44 -07:00
Alena Prokharchyk
9c9b7ee299
CS-15503: don't send Ips in Releasing state as a part of VPC VR start
2012-07-09 15:30:50 -07:00
Alena Prokharchyk
1657486f41
VPC: added vpc_id to private_ip_address table to indicate which vpc the ip belongs to
2012-07-09 13:00:03 -07:00
Alena Prokharchyk
98f8e70ca9
VPC: CS-15486 - prepare public nic as a part of VR deployment
2012-07-09 10:11:29 -07:00
Alena Prokharchyk
29aaf4c841
VPC: fixed listNetworkACLs by networkId
2012-07-06 16:33:31 -07:00
Alena Prokharchyk
a9e1c8fa86
VPC: allow adding private gateway to the VPC when the VR is in Stopped state
2012-07-06 15:26:33 -07:00
Sheng Yang
987cf9bc93
CS-15447: Don't enable s2s vpn when provider is disabled
2012-07-06 15:08:26 -07:00
Alena Prokharchyk
c49cc27b1c
VPC: CS-15485 - dont' create a record for VPC VR private gateway nic in router_network_ref; do it for regular guest networks only
2012-07-06 14:54:25 -07:00
Alena Prokharchyk
ed63a14d5e
Resource tags: CS-15473 - fixed delete/list by resourceId when UUID is specified as a value
2012-07-06 10:32:24 -07:00
Alena Prokharchyk
447f018b13
VPC: fixed CS-15465 - lb creation for ip not associated with any networks
2012-07-05 18:06:52 -07:00
Alena Prokharchyk
f9d512f163
ResourceTags: resourcetags support for Project/Vpc/NetworkACL/StaticRoute
2012-07-05 17:33:20 -07:00
Alena Prokharchyk
7c647223f2
VPC: don't fail when create/remove static route when VPC VR is in Stopped state
2012-07-05 17:26:25 -07:00
Vijayendra Bhamidipati
3a557c2998
Merge branch '3.0.x' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 3.0.x
...
Conflicts:
server/src/com/cloud/network/NetworkManagerImpl.java
2012-07-05 17:06:02 -07:00
Vijayendra Bhamidipati
f1ec4fddd3
CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
...
Description:
As part of the fix for Bug CS-13127, a new overloaded function,
addProxyObject() was added to facilitate transparent db id to
uuid conversions when db IDs were added to exceptions that were
thrown in the Cloudstack mgmt server code. However, it turns out
that there are quite many db IDs still in the code that are
being directly embedded in the String message that is passed
during exception creation.
In this commit, we modify the default constructor of
InvalidParameterValueException so that it takes a second
argument of type List<IdentityProxy>. This will help developers
see that there is a second parameter required, and make them
look into what that parameter is about. Hopefully, this will
stop db IDs from being embedded into the exception message.
The parameter can be set to null though, since there are many
places in the code that don't embed any DB IDs in the exception.
This is still a WIP, so the older default constructor for
InvalidParameterValueException has not been removed yet. When
all instances of throw new InvalidParameterValueException()
have been moved over to the new default constructor, the old
one will be removed, else compilation will break. The reason
for having to do this in batches is that there are way too
many places in the code that throw exceptions, and they all
cannot be covered in a single commit without it taking much
time.
In following commits, all other exceptions will be changed
in the same way as InvalidParameterValueException.
2012-07-05 16:48:36 -07:00
Sheng Yang
a0a5e25e32
CS-15456: Prohibit creating more than one VPN gateway of VPC
2012-07-05 15:45:21 -07:00
Alena Prokharchyk
24023fd14d
VPC: don't allow vpcs for the same account with overlapping cidrs
2012-07-05 15:20:44 -07:00
Alena Prokharchyk
d8cdb89721
VPC: added field networkacl_service_provided to physical_network_service_providers table
2012-07-05 13:56:55 -07:00
Alena Prokharchyk
2699e2c508
VPC: CS-15447 - fail vpc creation when vpc provider is not enabled at least in one physical network in the target zone
2012-07-05 13:34:34 -07:00
anthony
f1ac568a91
VPC : check if dns1 is null
2012-07-05 11:53:04 -07:00
Alena Prokharchyk
e6d73fb114
VPC: added dns1/dns2 + networkDomain to the list of bootload args passed on VPC VR start
2012-07-05 10:32:51 -07:00
Alena Prokharchyk
931c3eb78e
VPC: removed NetworkACL interface; added getTrafficType() to Firewall
2012-07-05 10:22:49 -07:00
Alena Prokharchyk
1ac1bcb2f6
VPC: createLB rule - removed duplicated check for ip services when createLB rule
2012-07-03 17:34:49 -07:00
Alena Prokharchyk
3a56e3c55c
VPC: CS-15426 - In Basic zone always pass control nic when prepare nics for the VR
2012-07-03 17:10:12 -07:00
Alena Prokharchyk
5a175e871c
VPC: CS-15355 - fixed router when deployVm in Basic zone
2012-07-03 17:10:12 -07:00
Vijayendra Bhamidipati
ca5a53ce4d
Merge branch '3.0.x' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 3.0.x
2012-07-03 15:43:35 -07:00
Vijayendra Bhamidipati
e71732babc
CS-14952: Nexus vSwitch: vCenter IP Address and DataCenter information is not present in the "virtual_supervisor_module" table. VSwitch Crendentials are not encrypted.
...
Description:
Qualifying the VSM password stored in virtual_supervisor_module
as encryptable. The encryption/decryption is transparently done
by the cloudstack DAO layer.
2012-07-03 15:41:42 -07:00
Alena Prokharchyk
9f6d03b87b
VPC: added "forVpc" parameter to listNetworkOfferings command. If true, the offeirng can be used for vpc networks only
2012-07-03 15:37:07 -07:00
Alena Prokharchyk
1011dfd31c
Resource tags: 1) Remove tag records when correspdonding cloudStack object gets removed
...
2) added "tags" request parameter to the banch of list* Api commands (listVirtualMachines, listSnapshots - all commands are listed in the resource tags functional spec)
2012-07-03 14:47:07 -07:00
anthony
2742c50484
CS-15385 : fix vm start in basic zone
2012-07-03 11:30:59 -07:00
Alena Prokharchyk
1e67de0ac5
VPC: added missing FirewallService to the VR provider
2012-07-03 09:34:45 -07:00
Koushik Das
a8c1568b37
Fix for CS-15345
...
During account cleanup, associated network is accessed without checking whether it is present or not. Added a check to use it only when present.
2012-07-03 18:52:36 +05:30
Alena Prokharchyk
6af13737fa
VPC: corrected the name for PublicIp interface (mistakenly renamed it as a part of previous checkin)
2012-07-02 17:31:47 -07:00
Alena Prokharchyk
e3ca32af2a
VPC: remove network ACLs from VPC VR when shutdown guest network
2012-07-02 16:44:43 -07:00
Sheng Yang
c5cdd6947f
CS-6840: Fix 0 id returned by createVpnConnection
2012-07-02 16:15:43 -07:00
Alena Prokharchyk
481f59df3b
VPC: multiple fixes:
...
* Separate service for NetworkACL - "NetworkACL" service
* allow having just one network supporting LB in the VPC
* perform check against VPC when upgrade network to the new network offering (the same set of checks when you add new network to the VPC)
2012-07-02 14:14:34 -07:00
Alena Prokharchyk
4415c67604
VPC: createPrivateGateway - consists of plug nic + ipassoc (no setsource nat is needed)
2012-07-02 12:58:30 -07:00
Sheng Yang
618d2541c8
CS-6840: Add status checking for site 2 site VPN
2012-06-29 18:58:52 -07:00
anthony
0f06bc6643
VPC : network usage works in VPC
2012-06-29 17:33:17 -07:00
Alena Prokharchyk
49d8b650e9
VPC: listPrivateGateways command is available for regular user too (he needs to know the gatewayId for the static route creation)
2012-06-29 15:17:17 -07:00
Alena Prokharchyk
07ef43bc84
VPC: added vpccidr to the list of VPC router bootload args
2012-06-29 13:59:49 -07:00
Alena Prokharchyk
37f29ccb11
VPC: set networkId to be null for IP address when the last PF/LB rule is removed for it and the IP belongs to VPC
2012-06-29 13:46:20 -07:00
kishan
077ca1489c
bug CS-15389: Added prepareStop to Virtualmachine manager and moved network usage collection into prepareStop of VR manager
2012-06-28 18:07:47 -07:00
Alena Prokharchyk
e6383fc845
VPC: when add guest network to VPC, verify that the list of network services is within the list of services supported by VPC offering
2012-06-28 17:13:39 -07:00
Sheng Yang
66a918f51a
CS-6840: List all objects without require parameter
2012-06-28 15:25:15 -07:00
Alena Prokharchyk
ceb4445166
VPC: createPF/createLBrule: 1) don't allow to pass openFirewall=true 2) when no openFirewall is passed in, defaulted to false if the public ip belongs to VPC
2012-06-28 14:19:14 -07:00