lp:~sandy-walsh/nova/lp702010

Branch merges

Propose for merging

No branches dependent on this one.

Merged into lp:~hudson-openstack/nova/trunk at revision 552

Eric Day (community): Needs Fixing on 2011-01-12

Jay Pipes (community): Approve on 2011-01-12

Josh Kearney (community): Approve on 2011-01-12

Vish Ishaya (community): Approve on 2011-01-12

Diff: 47 lines (+2/-3)

4 files modified

bin/nova-api (+0/-1)
bin/nova-combined (+0/-1)
nova/auth/manager.py (+1/-1)
nova/flags.py (+1/-0)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related bugs

Bug #702010: novarc template points CloudServer Auth URL to wrong port

Medium

Fix Released

Link a bug report

Related blueprints

553. By Sandy Walsh on 2011-01-12

duplicated flags in -api and -combined moved to flags.py

552. By Sandy Walsh on 2011-01-12

change novarc template from cc_port to osapi_port. Removed osapi_port from bin scripts.

551. By Ilya Alekseyev on 2011-01-12

Added support of availability zones for compute.
models.Service got additional field availability_zone and was created ZoneScheduler that make decisions based on this field.
Also replaced fake 'nova' zone in EC2 cloud api.

550. By Anne Gentle on 2011-01-12

Had to abandon the other branch (~annegentle/nova/newscript) because the diffs weren't working right for me. This is a fresh branch that should be merged correctly with trunk. Thanks for your patience. :)

549. By root <root@tonbuntu> on 2011-01-12

This branch adds web based serial console access. Here is an overview of how it works (for libvirt):

1. User requests an ajax console for an instance_id (either through OS api, or tools/euca-get-ajax-console)
  a. api server calls compute worker to complete request
  b. compute worker parses an instance's xml to locate its pseudo terminal (/dev/pts/x)
  c. compute worker spawns an ajaxterm daemon, bound to a random port in a specified range. socat is used to connect to /dev/pts/x. Note that ajaxterm was modified in the following ways:
    i. dies after 5 minutes of inactivity
    ii. now requires token authentication. Previously it was trivial to hijack an ajaxterm
  d. compute worker returns ajaxterm connect information to the api server: port, host, token
  e. api server casts connect information to the nova-ajax-console-proxy (a new service)
  f. api server returns a url for the ajaxterm (eg. http://nova-ajax-console-proxy/?token=123)
2. User now has a url, and can paste it in a browser
  a. Browser sends request to https://nova-ajax-console-proxy/?token=123
  b. nova-ajax-console-proxy maps token to connect information
  c. nova-ajax-console-proxy constructs a proxy to the ajaxterm that is running on the host machine. This is now done with eventlet, though previously it was done using twisted
3. User interacts with console through web browser

NOTE: For this to work as expected, serial console login must be enabled in the instance. Instructions for how to do this on ubuntu can be found here: https://help.ubuntu.com/community/SerialConsoleHowto. Note that you must actively log out of the serial console when you are finished, otherwise the console will remain open even after the ajaxterm term session has ended.

Also note that nova.sh has been modified in this branch to launch nova-ajax-console-proxy.

548. By Ryan Lane <laner@controller> on 2011-01-12

Changing DN creation to do searches for entries.

This change adds additional interoperability (as many directory servers and LDAP admins use cn, or another attribute, as the naming attribute). DN creation will incur a slight performance penalty for doing so, as DNs must be searched for now. User and project creation skip this performance penalty, as there is no need to search for an entry that is being created.

547. By Lorin Hochstein on 2011-01-12

Fixes bug #701575: run_tests.sh fails with a meaningless error if virtualenv is not installed. Proposed fix tries to use easy_install to install virtualenv if not present.

Test by doing "run_tests.sh -V" on a system that has easy_install installed but not virtualenv.

546. By Todd Willey on 2011-01-11

Quick bugfix. Also make the error message more specific and unique in the equivalent code in the revoke method.

545. By Sandy Walsh on 2011-01-11

Read Full Spec for implementation details and notes on how to boot an instance using OS API.
http://etherpad.openstack.org/B2RK0q1CYj

Look at these notes for known issues:
http://etherpad.openstack.org/BXOU0TTj9M

544. By Soren Hansen on 2011-01-11

Fixed a number of issues with the iptables firewall backend:
 * Port specifications for firewalls come back from the data store as integers, but were compared as strings.
 * --icmp-type was misspelled as --icmp_type (underscore vs dash)
 * There weren't any unit tests for these issues.