GitLab

Do not allow api to create public networks and type other
than PRIVATE_MAC_FILTERED/PRIVATE_PHYSICAL_VLAN.

Rename PUBLIC_ROUTED_USE_POOL setting to PUBLIC_USE_POOL.

Let synnefo do IP pool management only if network is private or
PUBLIC_USE_POOL is True.
Signed-off-by: Dimitris Aragiorgis <dimara@grnet.gr>

Add BACKEND_PER_USER setting, a mapping from users to backends. This setting
can by used in order to bypass the default backend allocation process, and
allocate all the new VMs of a specific user to a specific Backend.

Implement multiple public networks in order to support:
- different public networks per backend
- non-consecutive IP ranges in each backend

To support this, public networks are treated different from private
ones. Namely, they are correlated with one backend (and so have
only one BackendNetwork entry) instead of private which are expanded
to all available backends.

Also the backend allocator is modified in order to exclude the backends
that have only full networks.

Finally GANETI_PUBLIC_NETWORK became obsolete, and so removed.

Currently, choice of public network is done by synnefo, but in the
future the user may be able to choose it (needs extension of the
api with network-id)

Describe how to set ext disk template provider.

SECRET_ENCRYPTION_KEY can be up to 32 bytes long, since bigger keys are
not supported by AES encryption. Add comment to the setting and better
message to exception.

Rename ENCRYPTION_KEY to SECRET_ENCRYPTION_KEY to prevent from being
displayed at django debug traces.

This reverts commit 2f998a3756c6fc7ddce9e0f83dea738e473320b8.

In order to guarantee uniqueness of MAC address accross all backends,
synnefo assignes a unique mac prefix to each network in each backend.

A mac-prefix of 20 bits, which is picked from the MacPrefixPool, is
assigned to each Network. The mac-prefix of the network in each
backend results from combining the mac-prefix of the Network with the
unique index of the Backend, resulting in a 3-byte mac-prefix (up to 16
Backends).

Settings PRIVATE_MAC_FILTERED_BASE_MAC_PREFIX and
PRIVATE_MAC_FILTERED_MAX_PREFIX_NUMBER have been converted to
MAC_POOL_BASE and MAC_POOL_LIMIT, since mac-prefixes are now assigned to
all networks.

Add PRIVATE_PHYSICAL_VLAN_TAGS setting

Introduce new setting 'PUBLIC_ROUTED_USE_POOL', to indicate whether
synnefo will be responsible for the IP management of the public network,
or this responsibility will be delegated to Ganeti.

Limit the size of networks that users can create, since big IP
pools can have negative impact on performance. Allowed network
size is controled by 'MAX_CIDR_BLOCK' setting.

Use cipher to encrypt the passwords of the Ganeti backends in the DB.
Encryption/decryption is based on a configurable key, defined by the
ENCRYPTION_KEY setting. After modifying this setting, synnefo will be
unable to decrypt already stored passwords, and passwords must be
re-entered, using 'snf-manage backend-modify' command and restaring the
server. A migration file is responsible for initially encrypting already
stored passwords.

Since Ganeti version 2.6, Ganeti is aware of private networks. We take
advantage of this by propagating network handling to Ganeti. Network
model is expanded to include information about the type of network
(public routed, physical vlan, private filtered), subnet, gateway, dhcp,
link and mac_prefix.

- Update Network Model and delete NetworkLink model
- Create MacPrefixPool and BridgePool models
- Default constant settings for MacPrefix management

Also improve documentation of quota settings.

- New dict setting VMS_USER_QUOTA to allow setting per user quota
  (overrides MAX_VMS_PER_USER setting)
- Private networks quota mechanism (based on MAX_NETWORKS_PER_USER and
  NETWORKS_USER_QUOTA settings)
- Different response message for GANETI_MAX_LINK_NUMBER overlimit
  errors (To differentiate from user quota overlimit error). Backend
  not raises NetworkLink.NotAvailable exception when no available link
  can be created.
- Additional unittests for vms/networks quotas

- Rename GANETI_PUBLIC_LINK to GANETI_PUBLIC_NETWORK
- modify create_instance of backend module

* Added middleware to authenticate with Astakos
* Removed more legacy code
* Deleted Image and ImageMetadata models

Tests and admin still pending.

required for snf-dispatcher to run

- Improved automatic version tagging from git repo.
- Added auto generated synnefo.<package>.version module to contain each
  package version.

split out of some commonly used code in a seperate package

since more than one packages exist in repository root

A new 'SNF:disk_template' field is returned.

Settings updated
Database migration needed

Refs #1005

A new 'SNF:disk_template' field is returned.

Settings updated
Database migration needed

Refs #1005

A new 'SNF:disk_template' field is returned.

Settings updated
Database migration needed

Refs #1005

Refs #1093

Make RAPI CreateInstance() arguments deployment-specific.
Add the GANETI_CREATEINSTANCE_KWARGS setting, which allows the administrator
to set arbitrary arguments to RAPI CreateInstance().

Also add initial version of README.Upgrade, detailing
upgrades of Synnefo deployments.

Fixes #835

Update both the default API settings and the kvm-vif-bridge script
to use consistent {protected, unprotected, limited} tags to determine
the firewall profile to use on public network interfaces.

The API spec still defines the {ENABLED, DISABLED, PROTECTED} keywords,
which are used between the UI and the API and will updated at a later stage.

Make the disk template to use for Ganeti instances (e.g., 'plain'
or 'drbd') a configurable setting in settings.d/20-api.conf,
fixes #777.

Remove 36 lines of noise from all of settings.d configuration files.
Besides being utterly useless and extremely annoying, it's also commonly
incorrect since some of them are derived from Django and they're not
ours.

Enforce the flavor-specified disk size when creating a new VM.
Introduce the new IGNORE_FLAVOR_DISK_SIZES setting, which makes the API always
create VMs with 4GB or 14GB disks.
This is useful in development deployments where disk space is scarce.

Uses settings.DEFAULT_FIREWALL_PROFILE in case an instance has no firewall tags defined.

Refs #659