Commit Graph

137 Commits

Author SHA1 Message Date
Vijayendra Bhamidipati 6dc833c771 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	Missed throwing exceptions at few places when making
	changes previously. Commit includes whitespace corrections.
2012-08-03 13:24:18 -07:00
Alena Prokharchyk 21f2d1b779 VPC: moved vpc related code from NetworkManager to VpcManager 2012-07-31 16:58:14 -07:00
Vijayendra Bhamidipati 62c11df4e9 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	1) With this commit in the series for this bug,
	removed all occurrances of db IDs being passed
	when raising InvalidParameterValueException.

	2) Renamed HyervisorTemplateAdapter.java to
	HypervisorTemplateAdapter.java.
2012-07-27 15:08:48 -07:00
Vijay 04b51bb6ba AutoScale.
NetScaler changes for deleteAutoScaleVmGroup and min/max member
    policies - Tested
    Introducing apikey/sharedsecret/csurl empty checks as well
    Introducing the autoscale change sheet that got deleted during the merge
2012-07-24 19:25:22 +05:30
Vijay 62082b0de6 Resetting unwanted files similar to 3.0.x 2012-07-24 10:45:25 +05:30
Vijay 30cb0e74d2 AutoScale. ALenas Final Review Comments. 2nd Cut. Remove csurl from profile, 2012-07-24 10:02:29 +05:30
Deepak Garg 349ab92ffc Added more logging to AutoScale Vm Group 2012-07-24 10:01:13 +05:30
Deepak Garg 8bbc8ee0ec Added csurl as param in CreateAutoScaleVmProfileCmd 2012-07-24 09:58:56 +05:30
Vijay fa9282add1 AutoScale. Alena's final review comments. 1st Cut. 2012-07-24 09:58:17 +05:30
Vijay 21e13657b4 AutoScale.
All API commands with separate service layer for AutoScale.
  Not tested.
2012-07-24 09:57:10 +05:30
Alena Prokharchyk 49199d0022 VPC: when VPC router gets destroyed and recreated, plug public nic for each Vlan where VPC public ips belong to 2012-07-20 16:28:43 -07:00
Alena Prokharchyk c0fb2fece9 VPC: CS-15638: Plug nic for the public ip address if the ip address from the diff vlan range than sourceNat ip 2012-07-20 13:25:09 -07:00
Alena Prokharchyk 0575b83ec0 VPC: CS-15598 - update ipVO object after getting system ip as a part of elastic LB 2012-07-16 11:26:16 -07:00
Alena Prokharchyk 7e73ae8e74 VPC: CS-15553 and CS-15549 - more checks during automatic ip assoc to VPC network 2012-07-12 10:04:39 -07:00
Vijayendra Bhamidipati c5be9daa95 CS-15217: Security: Malicious user is able to get the size of the cloud by enumerating IDs
Description:

	Removing more DB IDs from exception messages,
2012-07-11 18:34:00 -07:00
Alena Prokharchyk 447f018b13 VPC: fixed CS-15465 - lb creation for ip not associated with any networks 2012-07-05 18:06:52 -07:00
Alena Prokharchyk 1ac1bcb2f6 VPC: createLB rule - removed duplicated check for ip services when createLB rule 2012-07-03 17:34:49 -07:00
Alena Prokharchyk 1011dfd31c Resource tags: 1) Remove tag records when correspdonding cloudStack object gets removed
2) added "tags" request parameter to the banch of list* Api commands (listVirtualMachines, listSnapshots - all commands are listed in the resource tags functional spec)
2012-07-03 14:47:07 -07:00
Alena Prokharchyk 37f29ccb11 VPC: set networkId to be null for IP address when the last PF/LB rule is removed for it and the IP belongs to VPC 2012-06-29 13:46:20 -07:00
Alena Prokharchyk bc9b23dfcd VPC: implemented vpc cleanup thread that cleans up Inactive VPCs (that were failed to delete) 2012-06-27 15:12:56 -07:00
Alena Prokharchyk 67f4776243 VPC: fixed ip addres assignment in createLB rule 2012-06-27 14:09:33 -07:00
Alena Prokharchyk 84a4a7c1c8 VPC: update ip address object after the ip is associated with the network 2012-06-25 16:26:19 -07:00
Alena Prokharchyk bb30a6b6bb VPC: initial checkin for network ACLs 2012-06-20 12:48:00 -07:00
Vijayendra Bhamidipati e03ed60540 Bug 13127: API error text refer to database ids instead of uuids
Bug CS-14448: Wrong error message on using the createVlanIpRange cmd

Cherry-picking from master for bug 14448 into 3.0.x. Resolved
conflicts encountered during cherry-picking.

Description:

	Adding overloaded addProxyObject() function to CloudException
	and RuntimeCloudException classes and using this function
	to stuff exceptions with IDs, to reduce code footprint.

Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/resource/ResourceManagerImpl.java
2012-06-18 12:55:44 -07:00
Vijayendra Bhamidipati 7860b78049 Bug 13127: API error text refer to database ids instead of uuids
Bug CS-14448: Wrong error message on using the createVlanIpRange cmd

Cherry-picking from master for bug 14448 into 3.0.x. Resolving
conflicts arising from the pick.

Description:

	Modifying the API functions' exception handling to call
	addProxyObject() wherever applicable, and removing some
	wrong calls to addProxyObject() that were put in in an
	earlier commit for this bug.

	With this commit, we cover many API functions to use the
	new exception handling code, but some pieces may still be
	left out. These will be covered as work in progress, when
	making changes to the CS API code.

Conflicts:

	server/src/com/cloud/network/NetworkManagerImpl.java
	server/src/com/cloud/network/lb/LoadBalancingRulesManagerImpl.java
	server/src/com/cloud/resource/ResourceManagerImpl.java
2012-06-18 12:44:18 -07:00
Alena Prokharchyk ddae550a55 AssociateIpAddress to VPC - the ip gets associated to the network only when the first rule for the ip gets created.
When the last rule is removed for vpc ip, networkId is set to null
2012-05-30 19:46:40 -07:00
frank 72d284de7d Switch to Apache license 2012-04-03 04:54:14 -07:00
prachi 420cf350fe Bug 13224 - Network Usage - Netscaler - External device is being queried multiple times (up to 8 times) whenever the Network Usage task is run.
Reviewed-by: Kishan

Changes:
- Separated out the External Network Usage task from the ExternalLBDeviceMgr because ExternalLbDeviceMgrImpl :: start() was getting multiple times during management server satrtup. The reason for this is that this is the baseclass for F5 and NetScalarElement.
- This caused us to schedule the ExternalNetworkUsageTask multiple times
- Also we have LBRulesMgr calling this ExternalLbDeviceMgrImpl  by creating an instance of this class which is declared abstract
- Hence having a separate implementation to manage the network usage stats should solve this.
2012-02-21 16:49:32 -08:00
Alena Prokharchyk 12aade4dc7 Changed isElastic to isSystem for the publicIpAddress assigned during the vm deployment in EIP enabled network
Reviewed-by: Chiradeep
2012-02-21 15:38:31 -08:00
kishan 1d1caa8af5 Bug 13823: Throw network conflict expection when LB rules conflict
Status 13823: resolved fixed
Reviewed-By: Nitin
2012-02-22 01:14:15 +05:30
Naredula Janardhana Reddy 023d06124f Bug 12812:
Summary of changes:
   - applyLoadBalancerConfig(long lbRuleId) method applies only one rule if it is Netscalar otherwise applies all the rules in add/revoke state.
2012-02-09 12:05:29 +05:30
Alena Prokharchyk cad392cd68 bug 13335: fixed listProjectInvitations by projectId
status 13335: resolved fixed
2012-02-07 13:16:27 -08:00
Naredula Janardhana Reddy ce22712293 Bug 12812:
Summary of changes:  Database changes will be rollbacked while applying the LB rule to the Netscaler device.
   - Database changes will be rollbacked to previous state during the following Lb API's:
      1) assignVM to LB rule
      2) remove VM from LB rule
      3) updateLb rule
      4) deleteLb rule
      5) create/attach sticky policy to Lb rule
      6) delete sticky policy from Lb rule
   - Database changes of the Lb rule will be not be rolledback during:
       1) Removing IP
       2) removing VM
2012-02-06 19:16:34 +05:30
Alena Prokharchyk 1490e45a1c Fixed format style in a bunch of files (replaced tabs with spaces as a part of it) 2012-02-03 13:49:11 -08:00
prachi 65b7a27407 Bug 13229 - Network Usage - Netscaler - NetworkUsage not being called when Lb rules are deleted and when releasing the Ip adress that has Lb rules.
Reviewed-by: Kishan

Changes:
- When an LB rule is deleted or the IP address having an LB rule configured is released, ExternalNetworkUsageCommand is fired to gather the usage
accumulated on that IP after the last run of the ExternalNetworkUsage job.
2012-02-02 17:23:51 -08:00
Naredula Janardhana Reddy aea81205ef Bug 11845:
Summary of Changes:
    - created a generic way for LB rule validations, so as LB device(like Haproxy) specific validations can be done syncronously.
    - Removed asyncronous validations from Haproxy and done syncronously.
2012-02-01 18:01:11 +05:30
Alena Prokharchyk 37d38427c6 Fixed transaction start in createLB rule 2012-01-30 15:53:54 -08:00
Alena Prokharchyk 665e8cb7c1 Allow LB rules creation for elasticIP 2012-01-23 11:41:00 -08:00
Alena Prokharchyk a40b8b31d3 Remove elastic IP only when the last lb rule is being removed 2012-01-23 11:41:00 -08:00
Alena Prokharchyk ba826ddc21 Fixed listing public IP addresses 2012-01-20 11:34:54 -08:00
Alena Prokharchyk 6deeb7ddc9 Firewall service is enabled in default elb/eip network offering
Also added more handling for error cases scenarios
2012-01-19 13:58:35 -08:00
Alena Prokharchyk 0f6f231ee6 Elastic IP - when deployVm, get ip address and enable static nat on it. On vm destroy release the Ip 2012-01-19 13:58:34 -08:00
Alena Prokharchyk 630cbb2243 Added elb and eip capabilities to network offering response 2012-01-19 13:57:37 -08:00
Alena Prokharchyk a8758d292e ElasticLB support in Basic zone.
When elb capability is enabled on the network offering, we:

1) on each createLB command:
* associate ip address to the LB rule owner
* create LB rule

2) on each deleteLb command:
* delete the rule
* disassociate ip address

The rule belongs to the owner, so proper usage events are generated
2012-01-19 13:57:37 -08:00
Alena Prokharchyk d20e10edd3 bug 12919: pass all lb rules in transition (revoke/add) state to the backend when apply a single LB rule
status 12919: resolved fixed
2012-01-18 14:15:21 -08:00
Alena Prokharchyk 83400cd15f bug 12776: if there are multiple objects involved in resource creation, verify that they belong to the same account
status 12776: resolved fixed
2012-01-17 13:40:37 -08:00
Alena Prokharchyk f0c4980dff bug 13110: use Ternary data structure when build search criteria
status 13110: resolved fixed
2012-01-16 14:15:28 -08:00
Alena Prokharchyk c581506103 bug 12306: list* command revamp 2012-01-09 10:07:42 -08:00
Sheng Yang 89ca2fe48e bug 12656: Add restriction for network update and new rules
status 12656: resolved fixed
2012-01-05 21:08:41 -08:00
Alena Prokharchyk dc9efbb46e return only domains in Active state to the API 2011-11-30 13:56:37 -08:00