9003 Commits

Author SHA1 Message Date
Brian Federle
c6c75c498e Whitespace cleanup 2011-11-17 15:17:00 -08:00
Jessica Wang
496f591e56 cloudStack 3.0 new UI - NaaS - F5, SRX - when status is disabled, click F5 or SRX will lead to an Add form. 2011-11-17 15:00:41 -08:00
Jessica Wang
64f5681097 cloudStack 3.0 new UI - System - NaaS - populate network service provide status (enabled/disabled) in zone chart. 2011-11-17 14:49:25 -08:00
Alena Prokharchyk
5571afa471 Virtual router elements: prepare nics only when VirtualRouter is a provider for at least one service in the network 2011-11-17 14:33:22 -08:00
Brian Federle
ed176cf3c9 -Fix zone chart -- $browser is undefined error
-Support dynamic generation of create form fields (for add network offering)
-Add example add network offering form
2011-11-17 14:16:42 -08:00
Alena Prokharchyk
0bb325ac12 Call implement() and shutdown() methods for providers only when the provider serves a service for the network 2011-11-17 13:53:53 -08:00
Sheng Yang
cb6c1424ef NaaS: Add virtual router state check for virtual router element 2011-11-17 13:42:29 -08:00
prachi
b0cdb86d9e Merging listSupportedNetworkServices and listSupportedNetworkServiceProviders.
listSupportedNetworkServiceProviders returs list of services with providers and capabilities of each service.
It supports 2 parameters:
-service : list providers and capabilities of this service
-provider: list services of this provider
- if none is specified, lists all services supported
2011-11-17 12:54:31 -08:00
Brian Federle
b378964e81 Fix system devices UI 2011-11-17 11:39:43 -08:00
Sheng Yang
cdd8d741ca NaaS: Add redundant router capability to virtual router 2011-11-17 11:33:04 -08:00
Jessica Wang
968bf5cbc6 cloudStack 3.0 new UI - System - Management - details - add "View Pods" 2011-11-17 11:12:57 -08:00
Nitin Mehta
e39498f1e7 bug 11997: Introduce created and update_time in the op_host_capacity table.
status 11997: resolved fixed
2011-11-17 18:10:59 +05:30
Abhi
9086a39bda bug 11910: avoid Starting to Running state changes during full sync, as the VM startup process does not like it 2011-11-17 14:32:56 +05:30
Sheng Yang
257836284a bug 11904: Fix regression caused by OpenJDK 1.6.0 security fix
It’s due to an security fix of OpenJDK 1.6.0 added by Redhat. Here is excerpt
of [RHSA-2011:1380-01] Critical: java-1.6.0-openjdk security update(
https://www.redhat.com/archives/rhsa-announce/2011-October/msg00011.html)

    A flaw was found in the way the SSL 3 and TLS 1.0 protocols used block
    ciphers in cipher-block chaining (CBC) mode. An attacker able to perform a
    chosen plain text attack against a connection mixing trusted and untrusted
    data could use this flaw to recover portions of the trusted data sent over
    the connection. (CVE-2011-3389)

    Note: This update mitigates the CVE-2011-3389 issue by splitting the first
    application data record byte to a separate SSL/TLS protocol record. This
    mitigation may cause compatibility issues with some SSL/TLS implementations
    and can be disabled using the jsse.enableCBCProtection boolean property.
    This can be done on the command line by appending the flag
    "-Djsse.enableCBCProtection=false" to the java command.

To our knowledge, there are two condition need to be met to trigger this bug:
1.    Using old keystore generated by mgmt. server 2.2.8, which is signed with
SHA1withDSA. Any version later than 2.2.8 would generate keystore signed with
SHA1withRSA. RSA one seems fine with us so far.
2.    Use OpenJDK >=1.6.0.

The reason is, due to the security fix above, the assumption that one packet
would contain only one SSL record is broken. The decrypted data maybe only
contained the first byte of original application data. Then result in buffer
underflow when mgmt server want to read more from it.

To workaround it, according to the message above, add
"-Djsse.enableCBCProtection=false" to tomcat6.conf JAVA_OPTS line would work.
Notice the parameter would only work with latest version of OpenJDK, so simply
add it to the all setup would not work.

This patch provided a fix for it.

status 11904: resolved fixed
2011-11-16 18:40:14 -08:00
Kelven Yang
08339d663f bug 12039,12041: when taking snapshot for detached volume, keep the worker VM around until backup copy to SSVM is done
Reviewed-by: Frank
2011-11-16 18:39:59 -08:00
Kelven Yang
9676947175 bug 12039, 12041: forgot one more place. Reviewed-by: kelven 2011-11-16 18:39:58 -08:00
Kelven Yang
67a2320001 bug 12039, 12041: detach all disks before destroy worker VM to avoid accidentally delete the underlying disk along with the worker VM. Reviewed-by: Kelven 2011-11-16 18:39:58 -08:00
Murali Reddy
37908d2669 fixing bug in provider verify logic of SRX element 2011-11-16 18:23:09 -08:00
Alena Prokharchyk
8a0443341f Removed unsupported state from the network offering 2011-11-16 17:22:07 -08:00
Jessica Wang
45bfedb2c0 cloudStack 3.0 new UI - system - Advanced Zone - guest - create network - domain field and account field's showing/hiding depends on selection in scope field. 2011-11-16 17:15:38 -08:00
Jessica Wang
21a488254b cloudStack 3.0 new UI - system - Basic Zone - guest - implement create network cor Basic Zone. 2011-11-16 16:52:58 -08:00
Brian Federle
edc2df1d73 -Correctly refresh properties on detail view action
-Support async edit action
-Make action notification section optional
-Add save button to apply detail view edit
-Fix indentation, button spacing for multi-edit items
2011-11-16 16:19:17 -08:00
Alena Prokharchyk
1fadde2082 Fixed bug in list domain level networks 2011-11-16 15:07:24 -08:00
Alena Prokharchyk
790b33bdfc More validation to network and network offering creation/upgrade 2011-11-16 14:53:38 -08:00
Brian Federle
7832509e78 Fix action filters on domain details 2011-11-16 14:35:12 -08:00
Jessica Wang
7a8a260073 cloudStack 3.0 new UI - system - guest - network tabs - IP ranges - implement Add action and delete action. 2011-11-16 14:26:46 -08:00
Murali Reddy
cbc72f3ef7 adding service capabities to network offering response 2011-11-16 13:43:09 -08:00
Brian Federle
8f9a06fb41 Always show disabled list view actions 2011-11-16 13:22:02 -08:00
Alena Prokharchyk
450b19532a Fixed unit test 2011-11-16 13:20:53 -08:00
Jessica Wang
a6f8572678 cloudStack 3.0 new UI - system - guest - network tabs - implement Delete action. 2011-11-16 13:01:35 -08:00
Brian Federle
4eb24d879f Remove VLAN/security groups radio buttons from zone wizard 2011-11-16 12:21:32 -08:00
Jessica Wang
985e8fd000 cloudStack 3.0 new UI - system - guest - network tabs - implement Edit action. 2011-11-16 12:12:56 -08:00
Sheng Yang
d4b1732ff4 NaaS: Fix redundant virtual router 2011-11-16 11:30:09 -08:00
Brian Federle
c535de7698 Fix add zone wizard dropping new row after creation 2011-11-16 11:27:24 -08:00
Jessica Wang
a7c0de3cf2 cloudStack 3.0 new UI - system - guest - (1) createNetwork - remove "tags" field since server-side doesn't support it any more. (2) add more fields to details tab of network tab. 2011-11-16 11:24:58 -08:00
Alena Prokharchyk
339e72d414 Introduced "supportedServices" parameter to createNetworkOffering API. This parameter replaces old parameters: dhcpService, gatewayService, etc. 2011-11-16 11:17:07 -08:00
Murali Reddy
75121bd762 bug 11817 : NAAS external networking device support
- added pluggable (service) API's for managing F5 and SRX devices
2011-11-16 10:53:22 -08:00
Jessica Wang
3c09c97e3d cloudStack 3.0 new UI - system - create guest network - populate network offering dropdown the other way around. 2011-11-16 10:47:53 -08:00
Jessica Wang
5d329bc623 cloudStack 3.0 new UI - create zone - call listCapabilities to refresh global variable after update network service provider completes. 2011-11-16 10:41:50 -08:00
Jessica Wang
33ebebf638 cloudStack 3.0 new UI - event page, alert page - add details view. 2011-11-15 17:47:36 -08:00
Jessica Wang
7ff10f99cb cloudStack 3.0 new UI - system - guest - network tabs - add details view. 2011-11-15 17:47:34 -08:00
Murali Reddy
f347158beb NAAS:fixed provider network element mapping for F5 & netscaler and permit device add when provider in disabled state 2011-11-15 17:29:18 -08:00
prachi
f0d1b97420 Renamed 'listNetworkServices' to 'listSupportedNetworkServices' 2011-11-15 17:16:31 -08:00
Sheng Yang
3aef381b37 NaaS: Add service provider to server-setup.xml 2011-11-15 17:09:55 -08:00
Jessica Wang
cc907adcbb cloudStack 3.0 new UI - System - Guest - network tab - add/remove fields in listView. 2011-11-15 16:58:57 -08:00
Edison Su
b2a5e26c06 bug 10792: add default system wide firewall rule
status 10792: resolved fixed
2011-11-15 16:51:30 -08:00
Alena Prokharchyk
03eb3c9037 Removed unused imports 2011-11-15 16:42:26 -08:00
Jessica Wang
4570d7d6cd cloudStack 3.0 new UI - System - Guest - populate network tabs by API call. 2011-11-15 16:40:01 -08:00
Jessica Wang
0f5e5df0ac cloudStack 3.0 new UI - System - Guest - create network - pass new parameter acltype to createNetwork API. 2011-11-15 16:21:23 -08:00
Jessica Wang
b01013f22a cloudStack 3.0 new UI - System - Add Zone - after createZone API returns success, enable virtual router element first, then enable network service provider. 2011-11-15 15:40:54 -08:00