openstack/nova - nova - OpenDev: Free Software Needs Free Tools

Looks like this fixes all HACKING problems that were around.
Thanks to Dina Belova and Alexander Kovalev for this work.
Change-Id: I8157f0d4890184c1216aab63ef7180ee8b7a184d

Change-Id: I10e7277b2d9b7a905b83192f8db47f425c5ae11a

fixes Bug 943690
Change-Id: I2b1f5cc66ba6ef02219c0d4445487bdd3a541f4b

Added to the RST docs to describe how queries to MySQL will block a nova
service.
Change-Id: I4ae209e2827978cc5469162d386197f2e46b342d

Drivers have been reviewed earlier by Quantum reviewers and are being
moved here on their request.
Also incorporating Soren,Dan, pp-draigbrady and Vish's suggestions.
Change-Id: If04807c473542e2f0259faa6d243c3e6e9539f64

bug 944381
Add logic to generate_autodoc_index.sh to produce rst underlines to match the heading strings.
Change-Id: Ib0f54a45fcc4ab6dfaa593c756682f1a25fdb420

As documented in bug 901594, previous nova releases, the IP address
was exposed as the DNS hostname, which worked well with euca-tools.
This is unfortunately not always ideal for private clouds.
Whilst it is expected to be able to euca-describe-instances --ipv4
in newer euca2ools releases, this behaviour is not always desired.
This patchset allows the nova admin to set a global flag of:
--ec2_private_dns_show_ip=True, to restore legacy nova behaviour.
This does not change the current default behaviour of nova.
Change-Id: I7c71ffe63929d90d45d9c724ab3409dcdee52b44

* includes a fake implementation of the netapp soap api
 * implements blueprint netapp-volume-driver
Change-Id: I8e2781e8bd4a552354f46a32c4a7ecdfd19f3e7a

Implements part of blueprint ssl-endpoints
Adds in configuration options:
kombu_ssl_version (ssl version)
kombu_ssl_keyfile (ssl keyfile)
kombu_ssl_certfile (ssl certfile)
kombu_ssl_ca_certs (ssl ca certfile)
This adds onto rabbit_use_ssl (which must be True for the above to have any effect) and allows
users to specify in greater detail (more than just True/False) how SSL is going to be configured.
Change-Id: I2186a6aa9397df857321324bf4007bc8310b85ce

Change-Id: Ia4653daf02c14c41bab8e62f063e7673321073f4

* Always return a string from AuthManager._build_mc_key()
* Fixes bug 938375
Change-Id: Iffceffab8ae62830202de07e3237230dab4e5a60

Fixes bug 934534.
The launch_index column in the database is used as the ami-launch-index value
provided by the metadata service.
If launch_index is not specified it defaults to 1. This is incorrect for the
single instance case (should be 0) and doesn't correctly handle multi-instance
starts.
This branch changes the default launch_index to 0 (to handle the single
instance case) and adds the launch_index in the schedulers for multi-instance
starts.
Change-Id: Ifc45abf4cd9f50f732ba4a4b68c0a6242a6c9710

bug 897726 Add "attaching" status for volumes and clear state on error
This closes a gap where multiple calls of attach for the same volume
can happen before the volume is actually attached.
Change-Id: I59d22ceda83729c1a455af9994c9ffec1912e23b

Also remove comment which is no longer relevant.
Change-Id: I33a951d08a34510b2a9dbacb9fb3ebf6bee978b4

Change-Id: Ie1f40fcce6ce6af4ab71961c725dcd626eda8aea

* enables hairpin_mode on virtual bridge ports on instance spawn
* adds conntrack DNAT state criteria to fixed/fixed SNAT exception so reflected traffic SNATs
* updates get_interface ElementTree to work with Python 2.6/2.7
* fixes bug 933640
Change-Id: I63b3e91b41898fcffda8a288be503f9b740b4b4e

Addresses Bug 708278
Add check for duplicates in api.py
Add DuplicateVlan to exception.py
Add test to raise DuplicateVlan in test_db_api.py
Add to Authors
Change-Id: I9d68d7b7c886071e38df3c9d7d53724758bdd84c

remove unused methods and classes in nova/virt/libvirt/firewall.py
and releative function tests. now,nova use nwfilter offered by
libvirt only for anti ARP and IP spoofing.other security policy use
iptables.
Change-Id: Ib9866802ef64668e2feba09124bdf7c7fee92f92

Fixes LP Bug #32154.
Change-Id: I9d6ddfedcc39308811ff5264879b45b4847ec4a8

CA filesystem now created by nova-cert
Also changing Author details
Change-Id: I456d985810d6f0312a7ef94b21637f347e933303

These compute API links were broken, previously referring to
Rackspace URLs with s/v1.0/v1.1/
The links now correctly reference long-lived locations on
docs.openstack.org.
Change-Id: I10efca2868a05982a1783688e374060acf1d0a69

Implements blueprint fast-cloning-for-xenserver
	1. use_cow_images flag is reused for xenserver to check if copy on write images should be used.
	2. image-id is used to tag an image which has already been streamed from glance.
	3. If cow is true, when an instance of an image is created for the first time on a given xenserver, the image is streamed from glance and copy on write disk is created for the instance.
	4. For subsequent instance creation requests (of the same image), a copy on write disk is created from the base image that is already present on the host.
	5. If cow is false, when an instance of an image is created for the first time on a host, the image is streamed from glance and its copy is made to create a virtual disk for the instance.
	6. For subsequent instance creation requests, a copy of disk is made for creating the disk for the instance.
	7. Snapshot creation code was updated to handle cow=true. Now there can be upto 3 disks in the chain. The base disk needs to be uploaded too.
	8. Also added a cache_images flag. Depending on whether the flag is turned on on not, images will be cached on the host.
Change-Id: I54838a24b061c134877f3479c925c6ee78da14bc

Add a new nova configuration flag, boolean, enable_instance_password.
When the flag is True (default), existing behavior is unchanged.
When the flag is False, responses from the create or
rebuild API calls don't include the adminPass attribute.
Change-Id: Icb2bd703770f3a39bb1e458dc31e1489d48da7c1

Change-Id: Iad8f66af18eb396f4737cd4ea168edcc77481ee6

fixes bug: 741972
Change-Id: I4a661a13c5baaa79ee647a6c1cedcef29a2642f6

- Syntax is OS-KSEC2:ec2Credentials (not ec2Credentials)
- adds to fix for bug 917408
- Syntax also requires a call to /tokens instead of /ec2tokens
- Changes are compatible (old syntax supported)
- Warning will be issued to log if URL syntax is old
Change-Id: I5ff9d1643122de2f383517e60f15852720c54490

* Updates methods in nova.compute.instance_types to catch
 InstanceTypeNotFound exceptions and re-raise them as ApiError.
 - Previously, the methods in instance_types were raising ApiError in
 response to DBError, but the underlying db calls have since been
 updated to detect empty results and throw more specific exceptions.
 * Updates get_instance_type_by_flavor_id to not try to catch DBError,
 as the underlying db call only ever raises FlavorNotFound.
 get_instance_type_by_flavor_id should not raise ApiError, as callers
 expect the FlavorNotFound exception and know how to handle it.
 * Fixes bug 872618
Change-Id: I8652f04889adb448017afd253ecdcc840fbb660f

Fixes bug 902162
Change-Id: I1b73943aab338bde90b4d47bc015964e9981af5d

Changed the responses to match that of Amazon EC2
Changed test to expect that response
Change-Id: Ia03a0ea663614944067c0a0193058ba91e149ad2

This change is intended to make log messages including instance
uuids consistent. This eases operational support, as when a
customer asks for the history of there instance it is a simple
grep operation, instead of the current situation. I have included
a sample use, but will work through adding this to relevant log
messages over time.
Change-Id: I1f61c04f32dbb960471950ac7231313d9d9ced12

* Adds new SolidFire driver that subclasses nova.volume.san.SanISCSIDriver
* Adds unit tests for new driver
* Adds new exception subclasses in nova.exception
* Adds John Griffith to Authors
Implements solidfire-san-iscsidriver
Change-Id: I4dc7508ba08f5333cde74d4cfeaae3939c5d2b02

1. Provides dom0 IPtables driver to implement the Provider firewall rules.
 2. Existing libvirt code has been refactored to reduce the amount of duplicated code to a minimum
 3. The three provider apis in ec2/admin.py file are now fixed the following way:
 a. remove_external_address_block returned 'OK' on removing blocks which didn't exist. This is now fixed.
 b. block_external_addresses raised exception earlier on duplicate network blocks. Now the exception is logged and failed status message is returned.
 c. all the three provider apis now logs for invalid and improper inputs and return uniform (a dictionary ) and proper status messages for all cases.
 4. appropriate unit tests added to cover the same
Change-Id: I27d83186f850423a6268947aed0c9a349d8f8d65

Implements blueprint start-stop-methods-support-in-os-servers-xapi
Change-Id: I7aa241ffdd2ec3a7c9800411268f4adc47960be8

Implements blueprint apache-qpid-rpc.
This patch adds a new implementation of the nova.rpc API that uses Qpid
as the messaging backend. We first considered trying to add Qpid
support to kombu, but the kombu API did not map very well to Qpid, which
is based on a newer version of AMQP. It was easier to just map the nova
rpc API to Qpid.
For more information about how to use Qpid with Nova, see this wiki
page:
 http://wiki.openstack.org/QpidSupport
The structure of impl_qpid is largely based on impl_kombu, but adapted
to use the Qpid APIs as necessary. This patch also factors out some of
the code shared with impl_kombu into nova.rpc.common to try to cut down
on duplicated code.
The unit tests were written from scratch instead of taking advantage
of the common rpc unit tests. The common unit tests only work if qpidd
is running, but they do pass if enabled. The unit tests for impl_qpid
instead use mox to mock out the Qpid objects and ensure the right
operations happen on them when the rpc API is exercised.
This patch was a joint effort between myself and William Henry, which is
why he was added to the Authors file in this patch.
Change-Id: Ibacaa956e016ef96f014443074e2a4622e31f090

This allows an extension to add new actions for create and delete
operations to an existing collection.
Currently when extending an existing collection (API namespace), an
extension can register brand new 'actions', and extend any preexisting API
functionality, but unfortunately create and delete are special cases that
don't fall under the 'actions' classification, meaning the infrastructure
can't handle them unless extending an existing impl.
Stubbing out the create/delete methods in the original resource with
the equiv of a NotImplementedError doesn't work, since 'extend'ing
requires the original implementation to exit correctly.
Whitelist 'create' and 'delete' and handle them appropriately.
v2:
 Add myself to Authors
 Update wsgi.action docs
 Add a test case
v3:
 Actually update Authors
Change-Id: I550ae93c5e200f18644042ac81656bc76dbe8955