summaryrefslogtreecommitdiffstats
Commit message (Collapse)AuthorAgeFilesLines
...
| * | | | | | | | | Migration model update for multi-node resize fix.Brian Elliott2012-11-272-0/+188
| | |_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Adds source_node and dest_node to Migration model records for compatibility with multi-node resizes. The accompanying database migration: * Adds source and dest node information to existing Migration records * Fixes the node field on Instance records that have been resized. bug 1081355 Change-Id: I4b58821174a262ed7885aba1fc79b3b67c9aa859
* | | | | | | | | Merge "Add version to conductor migration_update message."Jenkins2012-11-271-1/+1
|\ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / |/| | | | | | | |
| * | | | | | | | Add version to conductor migration_update message.Russell Bryant2012-11-271-1/+1
| |/ / / / / / / | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | I forgot to add the minimum version requirement for the conductor rpc call to do a migration update. This fixes that mistake. Part of blueprint no-db-compute. Change-Id: I377a3c1d213abf203127eabd91095061156febc3
* | | | | | | | Merge "Add exceptions to baremetal/db/api"Jenkins2012-11-275-23/+107
|\ \ \ \ \ \ \ \
| * | | | | | | | Add exceptions to baremetal/db/apiDevananda van der Veen2012-11-265-23/+107
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Raise exceptions from baremetal/db/sqlalchemy/api.py following the precedents from nova/db/sqlalchemy/api.py. Fixes tests to expect the new exceptions. Adds __init__ so that baremetal tests work in isolation. blueprint general-bare-metal-provisioning-framework Change-Id: Ic8ef66e8f3180460a7bf117fccbfe15078905d8b
* | | | | | | | | Merge "Respect the base_dir_name flag in imagebackend."Jenkins2012-11-271-1/+2
|\ \ \ \ \ \ \ \ \
| * | | | | | | | | Respect the base_dir_name flag in imagebackend.Michael Still2012-11-271-1/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Resolves bug 1083447. Change-Id: Ie23c9f46bbbcd2b87dfa7b3ac767ad7c4a4c6397
* | | | | | | | | | Merge "Cells: Re-add DB model and calls"Jenkins2012-11-274-0/+107
|\ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | Cells: Re-add DB model and callsChris Behrens2012-11-214-0/+107
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Implements blueprint nova-compute-cells Change-Id: I5e254988f3dd17cd1147b6c2d0372e3bb6fe6937
* | | | | | | | | | | Merge "Display errors when running nosetests"Jenkins2012-11-271-1/+10
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Display errors when running nosetestsChuck Short2012-11-271-1/+10
| | |_|_|/ / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | During Ubuntu builds we run the run_test.sh script during the package build process, so that we can catch regressions in our packaging before uploading to the archive. However a recent change writes the output of the nosetests to an error log so we don't see why the package fail to build. This patch also displays the output of the nosetests so we can see why the tests fail without having to look at the nosetests.log. This patch add the '-v', for a verbose display of nosetests. Change-Id: Id21d53df356de344a8577282c5a82f3ff927bc11 Signed-off-by: Chuck Short <chuck.short@canonical.com>
* | | | | | | | | | | Merge "Provide better error message for aggregate-create"Jenkins2012-11-272-6/+11
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Provide better error message for aggregate-createJoe Gordon2012-11-262-6/+11
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | For an InvalidAggregateAction exception: Before: 'ERROR: There was a conflict when trying to complete your request (HTTP 409)' After: 'ERROR: Cannot perform action 'create_aggregate' on aggregate 'N/A'. Reason: invalid zone. (HTTP 400)' Fix bug 1083353 Change-Id: I26e30059fe5bbc30eecc52cccec4eba2a57d00db
* | | | | | | | | | | | Validate rxtx_factor as a float.Dan Prince2012-11-278-17/+38
| |/ / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Updates the rxtx_factor validations in the instance_types modules so that rxtx_factor is validated as a float. Given that rxtx_factor is stored as a float in the database this makes sense... and also adheres to some of the extension documentation as well (although some of the extension docs were incorrect as well). Previously rxtx_factor was being cast into an int which caused it to be stored and displayed incorrectly via the API. This patchset adds a test which fails with the old code. Additionally some of the API docs are corrected so that rxtx_factor is listed as a float in all examples. Fixes LP Bug #1081287. Change-Id: Iae98522a1f2ed63cbd2497b0b0af5ac2d9bb935c
* | | | | | | | | | | Merge "Don't hard code the xen hvmloader path."Jenkins2012-11-271-1/+4
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Don't hard code the xen hvmloader path.Chuck Short2012-11-221-1/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Both Ubuntu and Debian place the hvmloader in a different path which depends on the version is installed. The reason why this done is so you can different versions of Xen installed. As a result change the hvmloader to a configurable option for libvirt called xen_hvmloader_path. Change-Id: Ic407d14f56a2518de4cd4ab8872ac2055d20adcd Signed-off-by: Chuck Short <chuck.short@canonical.com>
* | | | | | | | | | | | Merge "Add migration_update to conductor."Jenkins2012-11-276-21/+50
|\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | Add migration_update to conductor.Russell Bryant2012-11-266-21/+50
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This patch adds a migration_update method to the conductor API. This is used by the compute manager to push off db access to nova-conductor. The only field that compute was updating was the status, so that is the only field allowed by the API. Instead of just sending the miration_id to the conductor, we are sending all of the migration data. This is done in the spirit of 'no-db-messaging'. While no other data is needed right now, it's easier to send it all now than have to change the API later. Change-Id: Ic3150fbc6d5e7b0c9e41681950a7424129cbc968
* | | | | | | | | | | | | Merge "Remove unnecessary topic argument."Jenkins2012-11-271-2/+1
|\| | | | | | | | | | | | | |_|_|_|/ / / / / / / / |/| | | | | | | | | | |
| * | | | | | | | | | | Remove unnecessary topic argument.Russell Bryant2012-11-261-2/+1
| | |/ / / / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The instance_update method was setting the topic to self.call(), but the value being passed is the default, so it's unnecessary. Just remove it. Change-Id: Iaabd246b8528a0858ee239e790bfcb13e919399a
* | | | | | | | | | | Merge "Imported Translations from Transifex"OpenStack Jenkins2012-11-271-414/+494
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Imported Translations from TransifexOpenStack Jenkins2012-11-271-414/+494
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Change-Id: I724ac38f1f98b27ed30382dc5f8c1789d0cc42f9
* | | | | | | | | | | | Merge "Clean up unused methods in scheduler/driver"Jenkins2012-11-272-103/+0
|\ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / |/| | | | | | | | | | |
| * | | | | | | | | | | Clean up unused methods in scheduler/driverZhiteng Huang2012-11-272-103/+0
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | The cast_to_volume_host() and cast_to_host() methods have not been used since compute RPC API is introduced. This patch removes these methods and the coresponding tests as well. Change-Id: Icd2b4b2245cc7662c8dcb6fd35d6c33b77d0429b
* | | | | | | | | | | | Merge "Add blank nova/virt/baremetal/__init__.py"Jenkins2012-11-271-0/+0
|\ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / |/| | | | | | | | | | |
| * | | | | | | | | | | Add blank nova/virt/baremetal/__init__.pyRussell Bryant2012-11-261-0/+0
| | |/ / / / / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Without this file in place I was seeing some test failures from the baremetal unit tests. The failure was: ImportError: No module named baremetal.db Change-Id: I7596e7916796d5cb382d3856918b35c01814a455
* | | | | | | | | | | Merge "Add SSL support to utils.generate_glance_url()."Jenkins2012-11-274-7/+21
|\ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | Add SSL support to utils.generate_glance_url().Josh Kearney2012-11-264-7/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Since glance now supports SSL, we need to take this into consideration when generating the URL. Also updates and adds a test. A new config option 'glance_protocol' was added that defaults to 'http' since that's what the glance options, '*_client_protocol', default to. Set to 'https' for SSL. Change-Id: Id231a1fd4c4d8e221ae0cf6541181e5572dff02b
* | | | | | | | | | | | Merge "Missing instance_uuid in floating_ip notifications"Jenkins2012-11-272-5/+15
|\ \ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / / |/| | | | | | | | | | |
| * | | | | | | | | | | Missing instance_uuid in floating_ip notificationsStef T2012-11-262-5/+15
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * Addresses bug 1073212 Change-Id: I50327a9d7051d9ddb0a95a89b50037873011aff4
* | | | | | | | | | | | Merge "Add pluggable ServiceGroup monitoring APIs"Jenkins2012-11-2616-143/+462
|\ \ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / / |/| | | | | | | | | | |
| * | | | | | | | | | | Add pluggable ServiceGroup monitoring APIsYun Mao2012-11-2616-143/+462
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Summary: * provide a pluggable ServiceGroup monitoring API * refactor the old DB-based implementation to the new API Currently nova compute nodes periodically write to the database (every 10 seconds by default) to report their liveness. This implementation factors out this functionality and make it a set of abstract internal APIs with a pluggable backend implementation. Currently it's named as ServiceGroup APIs. With this effort, we are hopeful to see the following benefits: * We expect to see more backend implementations in addition to the default database-based one, such as ZooKeeper (as described in blueprint zk-service-heartbeat) or rabbitmq heartbeat based. * We expect the code to live in openstack-common so projects other than Nova can take advantage of the internal APIs. * Lay the foundations to use lower overhead heartbeat mechanisms which scale better. * Other than reporting whether a node in a service group is up or down, the code may also be used to query for members. Other parts of the code could also take advantage of the new APIs. One noteable example is the MatchMaker in the rpc library, which may even become redundant. We have been working with Eric at Cloudscaling to see how this fits with the matchmaker. It is likely that this code will need to be used, at least by the peer-to-peer based RPC mechanisms, to implement the new create_worker method. DocImpact: new config options Co-authored-by: Pavel Kravchenco <kpavel@il.ibm.com> Co-authored-by: Alexey Roytman <roytman@il.ibm.com> Change-Id: I51645687249c75e7776a684f19529a1e78f33a41
* | | | | | | | | | | | Merge "Rename instance_info_cache unique key constraints."Jenkins2012-11-261-0/+65
|\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | Rename instance_info_cache unique key constraints.Dan Prince2012-11-251-0/+65
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Rename (via drop and recreate) the instance_uuid unique constraints on the instance_info_cache table so they reflect the column change name (UUID conversion) we complete in Folsom. Fixes LP Bug #1080837. Change-Id: I9dd01ebc896c1d7b51c212980e48db16bad18dec
* | | | | | | | | | | | | Add eventlet db_pool use for mysqlChris Behrens2012-11-262-7/+99
| |/ / / / / / / / / / / |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds the use of eventlet's db_pool module so that we can make mysql calls without blocking the whole process. New config options are introduced: sql_dbpool_enable -- Enables the use of eventlet's db_pool sql_min_pool_size -- Set the minimum number of SQL connections The default for sql_dbpool_enable is False for now, so there is no forced behavior changes for those using mysql. sql_min_pool_size is defaulted to 1 to match behavior if not using db_pool. Adds a new test module for our sqlalchemy code, testing this new option as much as is possible without requiring mysql server to be running. DocImpact Change-Id: I99833f447df05c1beba5a3925b201dfccca72cae
* | | | | | | | | | | | Merge "Make compute manager use nova-conductor for instance_update"Jenkins2012-11-2612-30/+81
|\ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | Make compute manager use nova-conductor for instance_updateDan Smith2012-11-2612-30/+81
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Several tests require changes to ensure that the conductor service is started (or set to local mode) before they ask the compute manager to do instance updates. Changes were required to some of the tests that check the value of the timestamps by converting to strings. After passing the instances through jsonutils.to_primitive(), the strings are a bit different. Change-Id: I660e471178f3e5b36c4be27d47047fb4e4e1f851
* | | | | | | | | | | | | Merge "Cleanup compute multi-node assignment of node"Jenkins2012-11-269-32/+46
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|/ / / / / / / / / |/| | | | | | | | | | | |
| * | | | | | | | | | | | Cleanup compute multi-node assignment of nodeBrian Elliott2012-11-259-32/+46
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Move assignment of the node field on the instance to the compute host to be more consistent with how the host field is assigned and handled by the resource tracker. Change-Id: Id3086585a99350abbab387932e689825b33ab6b5
* | | | | | | | | | | | | Merge "Adds API for bulk creation/deletion of floating IPs"Jenkins2012-11-2632-0/+605
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | Adds API for bulk creation/deletion of floating IPsChris Yeoh2012-11-2132-0/+605
| | |_|_|_|_|_|/ / / / / / | |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This adds an extension that provides a REST API for the bulk creation, deletion and listing of floating IPs. The interface is accessed via /v2/{tenant_id}/os-floating-ips-bulk This forms part of the work to provide APIs for functionality currently implemented by nova-manage that needs direct db access so nova-manage can eventually be removed Implements: blueprint apis-for-nova-manage DocImpact Change-Id: I621e2b070a896f7230cdf3f26f78ded85e72cf16
* | | | | | | | | | | | | Merge "Make nova-dhcpbridge use CONFIG_FILE over FLAGFILE"Jenkins2012-11-266-9/+28
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|/ / / / / / / / / / |/| | | | | | | | | | | |
| * | | | | | | | | | | | Make nova-dhcpbridge use CONFIG_FILE over FLAGFILEMark McLoughlin2012-11-266-9/+28
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | nova-dhcpbridge's FLAGFILE environment variable is one of the few remaining references we have to "flags". Switching to use a new environment variable is easy, but we need to take care that when you upgrade the code the compute and network services might not be restarted immediately. If this happens, the services may launch a new dnsmasq (so rootwrap needs to continue to support FLAGFILE) or an existing dnsmasq might run the lease script (so the script needs to support FLAGFILE). Change-Id: Ieb55daa2507abb8327c7f5a2ef2f682740f31a5d
* | | | | | | | | | | | | Merge "Added cpu_info report to HyperV Compute driver"Jenkins2012-11-268-4/+60
|\ \ \ \ \ \ \ \ \ \ \ \ \ | |/ / / / / / / / / / / / |/| | | | | | | | | | | |
| * | | | | | | | | | | | Added cpu_info report to HyperV Compute driverLuis Fernandez Alvarez2012-11-238-4/+60
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | It fixes bug 1082275 The current version of the HyperV Compute driver wasn't returning CPU information when it reported its resources. In order to solve it, this patch extracts the cpu properties from WMI and Win32 calls. Change-Id: I5c2a89b5e432f4e958354a15582258d4cff83658
* | | | | | | | | | | | | Merge "Change all tenants servers listing as policy-based"Jenkins2012-11-265-16/+33
|\ \ \ \ \ \ \ \ \ \ \ \ \
| * | | | | | | | | | | | | Change all tenants servers listing as policy-basedYunhong, Jiang2012-11-205-16/+33
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Currently when list servers from all tenants (i.e. --all-tenants is set as 1 when "nova list"), privilege is required. However, computer pollster in ceilometer need to get all instances from all tenants in one host. Granting admin privilege to the pollster is not very secure. All tenants servers list should be policy-based, instead of requiring admin privelege. There is one potential backward compatibility. With all_tenants specified, non-admin accounts will get back owned servers only without this patch, however it will get policy exception now if policy checking failed. IMHO the new behaviour makes more sense. Change-Id: I8f1f064434ab12b6c0cd636f84dfc1b6a9b2fc90 Signed-off-by: Yunhong, Jiang <yunhong.jiang@intel.com>
* | | | | | | | | | | | | | Merge "Use more specific SecurityGroupHandler calls"Jenkins2012-11-262-0/+27
|\ \ \ \ \ \ \ \ \ \ \ \ \ \ | |_|_|_|_|/ / / / / / / / / |/| | | | | | | | | | | | |
| * | | | | | | | | | | | | Use more specific SecurityGroupHandler callsSean M. Collins2012-11-212-0/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Instead of calling trigger_security_group_members_refresh, have NetworkManager and derived classes call more specific methods when an instance is created or destroyed. Methods such as the trigger_instance_add_security_group_refresh and trigger_instance_remove_security_group_refresh, instead of just having trigger_security_group_members_refresh get called and forcing implementors to try and figure out if it's an add or delete blueprint trigger-specific-sgh-functions Change-Id: Iefef9180972db3277ae6fc0c2c9abf518b00e2a4
* | | | | | | | | | | | | | Merge "Allow VMs to be resumed after a hypervisor reboot"Jenkins2012-11-2611-15/+29
|\ \ \ \ \ \ \ \ \ \ \ \ \ \