~anso/nova/staging : changes

~anso/nova/staging » Changes to nova/api/ec2/admin.py from revision 666

From Revision 666 to 170

Rev	Summary	Authors	Date
664	Merge provider_fw_rules. Merge provider_fw_rules.	Todd Willey	13 years ago
663	Disable floating (public) ips. Disable floating (public) ips.	Todd Willey	13 years ago
655	merged upstream merged upstream	Vishvananda Ishaya	13 years ago
652	merged combined fixes from trunk r767 + a few fixes merged combined fixes from trunk r767 + a few fixes	Vishvananda Ishaya	13 years ago
638	merged trunk merged trunk	Vishvananda Ishaya	13 years ago
637	merged deploy merged deploy	Vishvananda Ishaya	13 years ago
595	merged lp:~vishvananda/nova/lp710959 - fix for flatdhcp merged lp:~vishvananda/nova/lp710959 - fix for flatdhcp	Vishvananda Ishaya	13 years ago
593	merged trunk merged trunk	Vishvananda Ishaya	13 years ago
592	merged trunk merged trunk	Vishvananda Ishaya	13 years ago
549	This branch adds web based serial console access. Here is a... This branch adds web based serial console access. Here is an overview of how it works (for libvirt): 1. User requests an ajax console for an instance_id (either through OS api, or tools/euca-get-ajax-console) a. api server calls compute worker to complete request b. compute worker parses an instance's xml to locate its pseudo terminal (/dev/pts/x) c. compute worker spawns an ajaxterm daemon, bound to a random port in a specified range. socat is used to connect to /dev/pts/x. Note that ajaxterm was modified in the following ways: i. dies after 5 minutes of inactivity ii. now requires token authentication. Previously it was trivial to hijack an ajaxterm d. compute worker returns ajaxterm connect information to the api server: port, host, token e. api server casts connect information to the nova-ajax-console-proxy (a new service) f. api server returns a url for the ajaxterm (eg. http://nova-ajax-console-proxy/?token=123) 2. User now has a url, and can paste it in a browser a. Browser sends request to https://nova-ajax-console-proxy/?token=123 b. nova-ajax-console-proxy maps token to connect information c. nova-ajax-console-proxy constructs a proxy to the ajaxterm that is running on the host machine. This is now done with eventlet, though previously it was done using twisted 3. User interacts with console through web browser NOTE: For this to work as expected, serial console login must be enabled in the instance. Instructions for how to do this on ubuntu can be found here: https://help.ubuntu.com/community/SerialConsoleHowto. Note that you must actively log out of the serial console when you are finished, otherwise the console will remain open even after the ajaxterm term session has ended. Also note that nova.sh has been modified in this branch to launch nova-ajax-console-proxy.	root	13 years ago
528	Wrap logs so we can: Wrap logs so we can: * use a "context" kwarg to track requests all the way through the system * use a custom formatter so we get the data we want (configurable with flags) * allow additional formatting for debug statements for easer debugging * add an AUDIT level, useful for noticing changes to system components * use named logs instead of the general logger where it makes sesnse	Todd Willey	13 years ago
482	Optimize creation of nwfilter rules so they aren't constantl... Optimize creation of nwfilter rules so they aren't constantly being recreated.	Vishvananda Ishaya	13 years ago
470	Adds support for Pause and Unpause of xenserver instances. Adds support for Pause and Unpause of xenserver instances. Pause freezes the vm, keeping resources in-memory. I used this version of python cloudservers to test with: https://github.com/SandyWalsh/python-cloudservers url's are http://a.b.c.d/v1.0/servers/#######/pause and http://a.b.c.d/v1.0/servers/#######/unpause Note: no support for libvirt.	Sandy Walsh	13 years ago
377	Another pep8 cleanup branch for nova/api, should be merged a... Another pep8 cleanup branch for nova/api, should be merged after lp:~eday/nova/pep8-fixes.	Eric Day	13 years ago
291	Implementation of Rackspace token based authentication for t... Implementation of Rackspace token based authentication for the Openstack API. This is a re-proposal of a merge earlier that was failing to merge no matter what I tried, so this is the next option in a series of failures. All tests pass locally.	mdietz	13 years ago
275	Proposing merge to get feedback on orm refactoring. I am ve... Proposing merge to get feedback on orm refactoring. I am very interested in feedback to all of these changes. This is a huge set of changes, that touches almost all of the files. I'm sure I have broken quite a bit, but better to take the plunge now than to postpone this until later. The idea is to allow for pluggable backends throughout the code. Brief Overview For compute/volume/network, there are multiple classes service - responsible for rpc this currently uses the existing cast and call in rpc.py and a little bit of magic to call public methods on the manager class. each service also reports its state into the database every 10 seconds manager - responsible for managing respective object classes all the business logic for the classes go here db (db_driver) - responsible for abstracting database access driver (domain_driver) - responsible for executing actual shell commands and implementation Compute hasn't been fully cleaned up, but to get an idea of how it works, take a look at volume and network Known issues/Things to be done: * nova-api accesses db objects directly It seems cleaner to have only the managers dealing with their respective objects. This would mean code for 'run_instances' would move into the manager class and it would do the initial setup and cast out to the remote service * db code uses flat methods to define its interface In my mind this is a little prettier as an abstract base class, but driver loading code can load a module or a class. It works, so I'm not sure it needs to be changed but feel free to debate it. * Service classes have no code in them Not sure if this is a problem for people, but the magic of calling the manager's methods is done in the base class. We could remove the magic from the base class and explicitly wrap methods that we want to make available via rpc if this seems nasty. * AuthManager Projects/Users/Roles are not integrated into this system. In order for everything to live happily in the backend, we need some type of adaptor for LDAP * Context is not passed properly across rabbit Context should probably be changed to a simple dictionary so that it can be passed properly through the queue * No authorization checks on access to objects We need to decide on which layer auth checks should happen. * Some of the methods in ComputeManager need to be moved into other layers/managers * Compute driver layer should be abstracted more cleanly * Flat networking is untested and may need to be reworked * Some of the api commands are not working yet * Nova Swift Authentication needs to be refactored(Todd is working on this)	Vishvananda Ishaya	13 years ago
242	Fixes quite a few style issues across the entire nova codeba... Fixes quite a few style issues across the entire nova codebase bringing it much closer to the guide described in HACKING.	andy	13 years ago
231	Implemented admin client / admin api for fetching user roles... Implemented admin client / admin api for fetching user roles.	Devin Carlen	13 years ago
195	Implemented admin api for rbac Implemented admin api for rbac	Devin Carlen	13 years ago
170	Refactor of auth code Refactor of auth code projects are not created or destroyed automatically users and projects have an id that may not always == name users.py was renamed to manager.py manager singleton was changed from UserManager.instance() to AuthManager() the ldap backend was split into ldapdriver.py own file to support other backends lots of docstrings added ugly import fixed vpn ip and port returns none if vpn isn't allocated get_credentials returns exception if vpn isn't allocated flag for using vpns flag for auth_driver added exception for missing auth_driver	Vishvananda Ishaya	13 years ago

Older »