lp:~gandelman-a/nova/lp839796

Branch merges

Propose for merging

No branches dependent on this one.

Ready for review for merging into lp:~hudson-openstack/nova/trunk

Nova Core security contacts: Pending requested 2011-09-21

Diff: 23 lines (+13/-0)

1 file modified

nova/flags.py (+13/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Related blueprints

1611. By Adam Gandelman on 2011-09-21

nova/flags.py: Use '--optional_flagfile' to specificy a flagfile that will be used
only if it exists.

Pre-parse flagfiles from FlagValues.__call_ prior to the base class, so we can check
existence of any optional_flagfiles. If the file exists, append it to argv as a
regular '--flagfile' before gflags.FlagVlues does its parsing/loading. The
original '--optional_flagfile' is then later ignored as an unknown argument
its not declared anywhere.

1610. By Vish Ishaya on 2011-09-21

Fix keys in ec2 conversion to make sure not to use unicode.

1609. By Josh Kearney on 2011-09-21

Adds an 'alternate' link to image views per 3.10 and 3.11 of http://docs.openstack.org/cactus/openstack-compute/developer/openstack-compute-api-1.1/content/LinksReferences.html

1608. By Johannes Erdfelt on 2011-09-21

Instance deletions in Openstack are immediate. This can cause data to be lost accidentally.

This branch adds a new configuration flag, reclaim_instance_interval. The default of 0 results in the same behavior before this patch, immediate deletion of the instance. Any value greater than 0 will result in the instance being powered off immediately and then later the instance will be reclaimed.

New actions, restore and forceDelete allow a previously deleted instance to be restored, or reclaimed immediately.

1607. By Vish Ishaya on 2011-09-21

Makes sure ips are moved on the bridge for nodes running dnsmasq so that the gateway ip is always first.

1606. By Vish Ishaya on 2011-09-21

Remove keystone middlewares.

1605. By Vish Ishaya on 2011-09-20

Fix the display of swap units in nova manage.

1604. By Scott Moser on 2011-09-20

convert images that are not 'raw' to 'raw' during caching to node

1603. By Mark McLoughlin on 2011-09-20

Add iptables filter rules for dnsmasq (lp:844935)

On Fedora, the default policy for the INPUT chain in the filter table
is DROP. This means that DHCP and DNS request packets from the guest
get dropped.

Add these rules to allow the traffic through:

 $> sudo iptables -t filter -A nova-network-INPUT -i br0 -p udp -m udp --dport 67 -j ACCEPT
 $> sudo iptables -t filter -A nova-network-INPUT -i br0 -p tcp -m tcp --dport 67 -j ACCEPT
 $> sudo iptables -t filter -A nova-network-INPUT -i br0 -p udp -m udp --dport 53 -j ACCEPT
 $> sudo iptables -t filter -A nova-network-INPUT -i br0 -p tcp -m tcp --dport 53 -j ACCEPT

1602. By Scott Moser on 2011-09-20

create disk.local the same way ephemerals are created (LP: #851145)

If the user did not specify '--block-device-mapping /dev/vdb=ephemeral0', then the first non-root device would end up being created differently then if they had. It would not have a filesystem on it.

This makes 'local_gb' in the libvirt connection created the same way that
it would be if it were named ephemeral0.