Commit Graph

1659 Commits

Author SHA1 Message Date
Alena Prokharchyk 4e5355b192 VPC: CS-15519 - fixed ipAssoc when only zoneId parameter is passed in to the API call 2012-07-10 15:15:30 -07:00
Sheng Yang 37a0ef7375 CS-15512: Fix delete vpn connection 2012-07-10 14:47:27 -07:00
Alena Prokharchyk 3caffc7855 VPC: CS-15345 - fixed regression in ipRelease happening as a part of cleanupNetworkResources method 2012-07-10 14:33:24 -07:00
Sheng Yang 8212de6f94 CS-15513: Fix group 5 of s2s vpn 2012-07-10 10:31:25 -07:00
Alena Prokharchyk 08b9b3bc5b VPC: CS-15505 - allocate guest nics when new VR starts in VPC 2012-07-09 18:08:44 -07:00
Alena Prokharchyk e8658c9525 VPC: CS-15481: don't allow creating networkACLs for overlapping cidrs/ports 2012-07-09 16:24:44 -07:00
Alena Prokharchyk 9c9b7ee299 CS-15503: don't send Ips in Releasing state as a part of VPC VR start 2012-07-09 15:30:50 -07:00
Alena Prokharchyk 1657486f41 VPC: added vpc_id to private_ip_address table to indicate which vpc the ip belongs to 2012-07-09 13:00:03 -07:00
Alena Prokharchyk 98f8e70ca9 VPC: CS-15486 - prepare public nic as a part of VR deployment 2012-07-09 10:11:29 -07:00
Alena Prokharchyk 29aaf4c841 VPC: fixed listNetworkACLs by networkId 2012-07-06 16:33:31 -07:00
Alena Prokharchyk a9e1c8fa86 VPC: allow adding private gateway to the VPC when the VR is in Stopped state 2012-07-06 15:26:33 -07:00
Sheng Yang 987cf9bc93 CS-15447: Don't enable s2s vpn when provider is disabled 2012-07-06 15:08:26 -07:00
Alena Prokharchyk c49cc27b1c VPC: CS-15485 - dont' create a record for VPC VR private gateway nic in router_network_ref; do it for regular guest networks only 2012-07-06 14:54:25 -07:00
Alena Prokharchyk ed63a14d5e Resource tags: CS-15473 - fixed delete/list by resourceId when UUID is specified as a value 2012-07-06 10:32:24 -07:00
Alena Prokharchyk 447f018b13 VPC: fixed CS-15465 - lb creation for ip not associated with any networks 2012-07-05 18:06:52 -07:00
Alena Prokharchyk f9d512f163 ResourceTags: resourcetags support for Project/Vpc/NetworkACL/StaticRoute 2012-07-05 17:33:20 -07:00
Alena Prokharchyk 7c647223f2 VPC: don't fail when create/remove static route when VPC VR is in Stopped state 2012-07-05 17:26:25 -07:00
Vijayendra Bhamidipati 3a557c2998 Merge branch '3.0.x' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 3.0.x
Conflicts:
	server/src/com/cloud/network/NetworkManagerImpl.java
2012-07-05 17:06:02 -07:00
Vijayendra Bhamidipati f1ec4fddd3 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	As part of the fix for Bug CS-13127, a new overloaded function,
	addProxyObject() was added to facilitate transparent db id to
	uuid conversions when db IDs were added to exceptions that were
	thrown in the Cloudstack mgmt server code. However, it turns out
	that there are quite many db IDs still in the code that are
	being directly embedded in the String message that is passed
	during exception creation.

	In this commit, we modify the default constructor of
	InvalidParameterValueException so that it takes a second
	argument of type List<IdentityProxy>. This will help developers
	see that there is a second parameter required, and make them
	look into what that parameter is about. Hopefully, this will
	stop db IDs from being embedded into the exception message.

	The parameter can be set to null though, since there are many
	places in the code that don't embed any DB IDs in the exception.

	This is still a WIP, so the older default constructor for
	InvalidParameterValueException has not been removed yet. When
	all instances of throw new InvalidParameterValueException()
	have been moved over to the new default constructor, the old
	one will be removed, else compilation will break. The reason
	for having to do this in batches is that there are way too
	many places in the code that throw exceptions, and they all
	cannot be covered in a single commit without it taking much
	time.

	In following commits, all other exceptions will be changed
	in the same way as InvalidParameterValueException.
2012-07-05 16:48:36 -07:00
Sheng Yang a0a5e25e32 CS-15456: Prohibit creating more than one VPN gateway of VPC 2012-07-05 15:45:21 -07:00
Alena Prokharchyk 24023fd14d VPC: don't allow vpcs for the same account with overlapping cidrs 2012-07-05 15:20:44 -07:00
Alena Prokharchyk d8cdb89721 VPC: added field networkacl_service_provided to physical_network_service_providers table 2012-07-05 13:56:55 -07:00
Alena Prokharchyk 2699e2c508 VPC: CS-15447 - fail vpc creation when vpc provider is not enabled at least in one physical network in the target zone 2012-07-05 13:34:34 -07:00
anthony f1ac568a91 VPC : check if dns1 is null 2012-07-05 11:53:04 -07:00
Alena Prokharchyk e6d73fb114 VPC: added dns1/dns2 + networkDomain to the list of bootload args passed on VPC VR start 2012-07-05 10:32:51 -07:00
Alena Prokharchyk 931c3eb78e VPC: removed NetworkACL interface; added getTrafficType() to Firewall 2012-07-05 10:22:49 -07:00
Alena Prokharchyk 1ac1bcb2f6 VPC: createLB rule - removed duplicated check for ip services when createLB rule 2012-07-03 17:34:49 -07:00
Alena Prokharchyk 3a56e3c55c VPC: CS-15426 - In Basic zone always pass control nic when prepare nics for the VR 2012-07-03 17:10:12 -07:00
Alena Prokharchyk 5a175e871c VPC: CS-15355 - fixed router when deployVm in Basic zone 2012-07-03 17:10:12 -07:00
Vijayendra Bhamidipati ca5a53ce4d Merge branch '3.0.x' of ssh://git.cloud.com/var/lib/git/cloudstack-oss into 3.0.x 2012-07-03 15:43:35 -07:00
Vijayendra Bhamidipati e71732babc CS-14952: Nexus vSwitch: vCenter IP Address and DataCenter information is not present in the "virtual_supervisor_module" table. VSwitch Crendentials are not encrypted.
Description:

	Qualifying the VSM password stored in virtual_supervisor_module
	as encryptable. The encryption/decryption is transparently done
	by the cloudstack DAO layer.
2012-07-03 15:41:42 -07:00
Alena Prokharchyk 9f6d03b87b VPC: added "forVpc" parameter to listNetworkOfferings command. If true, the offeirng can be used for vpc networks only 2012-07-03 15:37:07 -07:00
Alena Prokharchyk 1011dfd31c Resource tags: 1) Remove tag records when correspdonding cloudStack object gets removed
2) added "tags" request parameter to the banch of list* Api commands (listVirtualMachines, listSnapshots - all commands are listed in the resource tags functional spec)
2012-07-03 14:47:07 -07:00
anthony 2742c50484 CS-15385 : fix vm start in basic zone 2012-07-03 11:30:59 -07:00
Alena Prokharchyk 1e67de0ac5 VPC: added missing FirewallService to the VR provider 2012-07-03 09:34:45 -07:00
Koushik Das a8c1568b37 Fix for CS-15345
During account cleanup, associated network is accessed without checking whether it is present or not. Added a check to use it only when present.
2012-07-03 18:52:36 +05:30
Alena Prokharchyk 6af13737fa VPC: corrected the name for PublicIp interface (mistakenly renamed it as a part of previous checkin) 2012-07-02 17:31:47 -07:00
Alena Prokharchyk e3ca32af2a VPC: remove network ACLs from VPC VR when shutdown guest network 2012-07-02 16:44:43 -07:00
Sheng Yang c5cdd6947f CS-6840: Fix 0 id returned by createVpnConnection 2012-07-02 16:15:43 -07:00
Alena Prokharchyk 481f59df3b VPC: multiple fixes:
* Separate service for NetworkACL - "NetworkACL" service
* allow having just one network supporting LB in the VPC
* perform check against VPC when upgrade network to the new network offering (the same set of checks when you add new network to the VPC)
2012-07-02 14:14:34 -07:00
Alena Prokharchyk 4415c67604 VPC: createPrivateGateway - consists of plug nic + ipassoc (no setsource nat is needed) 2012-07-02 12:58:30 -07:00
Sheng Yang 618d2541c8 CS-6840: Add status checking for site 2 site VPN 2012-06-29 18:58:52 -07:00
anthony 0f06bc6643 VPC : network usage works in VPC 2012-06-29 17:33:17 -07:00
Alena Prokharchyk 49d8b650e9 VPC: listPrivateGateways command is available for regular user too (he needs to know the gatewayId for the static route creation) 2012-06-29 15:17:17 -07:00
Alena Prokharchyk 07ef43bc84 VPC: added vpccidr to the list of VPC router bootload args 2012-06-29 13:59:49 -07:00
Alena Prokharchyk 37f29ccb11 VPC: set networkId to be null for IP address when the last PF/LB rule is removed for it and the IP belongs to VPC 2012-06-29 13:46:20 -07:00
kishan 077ca1489c bug CS-15389: Added prepareStop to Virtualmachine manager and moved network usage collection into prepareStop of VR manager 2012-06-28 18:07:47 -07:00
Alena Prokharchyk e6383fc845 VPC: when add guest network to VPC, verify that the list of network services is within the list of services supported by VPC offering 2012-06-28 17:13:39 -07:00
Sheng Yang 66a918f51a CS-6840: List all objects without require parameter 2012-06-28 15:25:15 -07:00
Alena Prokharchyk ceb4445166 VPC: createPF/createLBrule: 1) don't allow to pass openFirewall=true 2) when no openFirewall is passed in, defaulted to false if the public ip belongs to VPC 2012-06-28 14:19:14 -07:00