Hugo Trippaers
a7338387c1
Sourcenat is handled differently for routers and vpc routers
2015-03-16 11:35:26 +01:00
Hugo Trippaers
576564e744
If a file doesn't exist, create it
2015-03-16 11:35:26 +01:00
Ian Southam
762e05ddee
Bug fixed:
...
Default drop rul for inbound chain gets dropped by CsNetFilter
This would have been bad (tm)
2015-03-16 11:35:25 +01:00
Ian Southam
8b38bff962
A lot of corner cases dealt with
...
Need now to expand the test data to ensure I have got them all
Also failure to match because bizarrely some strings were unicode and some not
2015-03-16 11:35:25 +01:00
Ian Southam
5137d7e136
Removed dhcpopts.conf for now as, it is the routing options and they seem to be dealt with dofferently in the new arrangement
...
Changed the dhcp tests to avoid handing out the broadcast and gateway addresses :)
2015-03-16 11:35:25 +01:00
Hugo Trippaers
f21b90a73e
Add missing sourcenat rule
2015-03-16 11:35:25 +01:00
Hugo Trippaers
6d12d94e0c
Add the public source nat rule
2015-03-16 11:35:24 +01:00
Hugo Trippaers
80a149abb7
Add port forwarding and static nat to the convergence infrastructure
2015-03-16 11:35:24 +01:00
Hugo Trippaers
8c5dba31d0
Fix the forwardingrule databag
2015-03-16 11:35:24 +01:00
Ian Southam
7fc3365459
Implemented delete (add : false) for cs_dhcp
...
Added some tests to the test_update_config tests for dhcp entries
2015-03-16 11:35:24 +01:00
Ian Southam
e6e47de6ff
Stupid stupd bug
...
a or b is of course not the same as a | b
2015-03-16 11:35:23 +01:00
Ian Southam
c318bd6337
Corrected bug (I love tests)
...
The dhcp server will only start listening after a host has been added
In this condition, HUP is not enough
Changed so that if it is adding a first host it will restart the server
2015-03-16 11:35:23 +01:00
Ian Southam
0e8c79c7f1
That is the acls.
...
Need to check the order stays good
2015-03-16 11:35:23 +01:00
Ian Southam
8a92a0a460
Corrected a couple of small typos
2015-03-16 11:35:23 +01:00
Hugo Trippaers
f273fd4659
Add the static nat rules to the merge procedure
2015-03-16 11:35:23 +01:00
Hugo Trippaers
a789e8bf57
Fix a bug that would add updated control ip address instead of replace
2015-03-16 11:35:22 +01:00
Ian Southam
8f4461567d
That should be all the dhcp settings correct
...
CsGuestNetwork moved out of configure
dnsmasq config all switched to CsDhcp
2015-03-16 11:35:22 +01:00
Ian Southam
b45c71ee31
Acl code linked in
...
Dhcp code
Test file for dhcp entry
2015-03-16 11:35:22 +01:00
Hugo Trippaers
683e660d60
Small (but important) fixes
2015-03-16 11:35:22 +01:00
Ian Southam
574fa2c0a0
Call update_config.py if it is there
2015-03-16 11:35:21 +01:00
Ian Southam
8abf1a22ab
Auto create missing chains
...
Auto delete superfluous rules
TO DO: Priorities
2015-03-16 11:35:21 +01:00
Ian Southam
19fd0b4b57
Added logic to create all necessary firewall rules
...
TODO: Auto add chains
TODO: Delete rules that should not be there
TODO: Deal with precidence
2015-03-16 11:35:21 +01:00
Ian Southam
cd0ad69281
Tidied up main to be in line with the newer classes
...
Added a base classs CsDataBag which will autoload a given databag
2015-03-16 11:35:21 +01:00
Ian Southam
c6d99a45a2
First part of some serious refactoring
...
The problem is that teh convergence model does not works as it currently is
Firewall rules will get added but not deleted
This builds a table of firewall rules that need to be present
The new CsNetfilter class will then do:
1. Add rules that are not present
2. Delete any that were not explicitly in the add list
WIP
2015-03-16 11:35:21 +01:00
Hugo Trippaers
e323d63867
Merge vmmetadata, reuse the code from the existing script to parse it.
2015-03-16 11:35:20 +01:00
Ian Southam
4527519081
Refactored CsHelper into a module
...
Introduced CsNetfilter module/class
2015-03-16 11:35:20 +01:00
Ian Southam
4e63119873
Moved processing the cmd_line databag into update
2015-03-16 11:35:20 +01:00
Ian Southam
99dd91c565
Added placeholder for networkacl tests
2015-03-16 11:35:20 +01:00
Ian Southam
3ea63ced68
Added merge for network_acl type message
2015-03-16 11:35:19 +01:00
Ian Southam
7e9a0fac0d
Do not update etc or you will bring in a load of files that will have their
...
configuration overwritten
2015-03-16 11:35:19 +01:00
Ian Southam
fff3964332
Add catchall for unknown types
2015-03-16 11:35:19 +01:00
Hugo Trippaers
9ede758e4d
Small update to try do deal with the stuck issue
2015-03-16 11:35:19 +01:00
Ian Southam
98a43d184b
Fixed bug in which every run of loadQueueFile would append to the json file (merge)
...
cloud-early-config now saves its input file to /var/cache/cloud
Execute load cmd_line.json in update_config
Old way of working still in there to stop and possible clash until the base image is made
2015-03-16 11:35:19 +01:00
Sander Botman
9b40f3d379
fixing the nullpointer on type which is null
2015-03-16 11:35:18 +01:00
Ian Southam
680454dfdf
Some bug fixes
...
Some more tests
store vmpassword functionally working
Tests for store password
2015-03-16 11:35:18 +01:00
Sander Botman
4c5113b9e5
Creating new model for the firewall rules
2015-03-16 11:35:18 +01:00
Ian Southam
9d73879061
Fixed test (assert in guest check was wrong way around)
...
Also found condition inw hich apache would be miscobfigured and failed to run (I love tests!!)
Fixed configure.py to cover this case
Added a test to provoke this case!
2015-03-16 11:35:18 +01:00
Hugo Trippaers
d2e3b238ed
New style dnsmasq configuration
2015-03-16 11:35:17 +01:00
Ian Southam
4c5f4a1f9f
Added vmpassword type (does nothing yet)
...
Fixed tests to use /var/cache/cloud
Added some test files but will remove them when tests are properly completed
Fixed a bug in configure that did not deal well with databags with empty dev sections
2015-03-16 11:35:17 +01:00
Sander Botman
daf6c33507
Creating new model for the MonitorService
2015-03-16 11:35:17 +01:00
Hugo Trippaers
6a016d5b54
Small fixes
2015-03-16 11:35:17 +01:00
Hugo Trippaers
85434f49b9
Hotfix for lost control interface
2015-03-16 11:35:17 +01:00
Sander Botman
b4acd77abf
New model for RemoteAccessVpn and moving into the new structure
2015-03-16 11:35:16 +01:00
Hugo Trippaers
caef7ee9a9
Staticroutes to new json style
2015-03-16 11:35:16 +01:00
Hugo Trippaers
58919dcf50
Change the location for the temporary json files to /var/cache/cloud
2015-03-16 11:35:16 +01:00
Ian Southam
ca2ff2946e
Added some tests that test stuff
...
Specifically checking whether certain ip addresses get added and deleted
Also a rudementary test for the guest network ip
Much more to do!!
2015-03-16 11:35:16 +01:00
Sander Botman
92aca76c3b
Adding new model for the Site2SiteVpn configuration.
2015-03-16 11:35:15 +01:00
Sander Botman
1237ded02e
Fix on error reporting (null doesn't say much, so lets return the actual problem)
2015-03-16 11:35:15 +01:00
Ian Southam
c428d60e6b
Stop ignoring eth0
2015-03-16 11:35:15 +01:00
Ian Southam
dd6b643ceb
Do not use eth0 or eth1 for random tests
...
One or other will be the control interface of the box
2015-03-16 11:35:15 +01:00
