1. 30 Apr, 2013 2 commits
  2. 15 Apr, 2013 1 commit
    • Christos Stavrakakis's avatar
      Improve settings related to ASTAKOS url · 134e03c2
      Christos Stavrakakis authored
      Rename 'PITHOS_AUTHENTICATION_URL' setting to 'ASTAKOS_URL'. Also remove
      'PITHOS_AUTHENTICATION_USERS' from docs (it was removed from code in
      commit 8df4fae).
      
      Modify 'ASTAKOS_URL' to point to the node hosting the Astakos service
      instead of im endpoint, i.e. rename from
      'accounts.example.org/im/authenticate' to 'accounts.example.org'.
      134e03c2
  3. 27 Mar, 2013 1 commit
  4. 26 Feb, 2013 1 commit
  5. 14 Feb, 2013 1 commit
    • Kostas Papadimitriou's avatar
      Delegate astakos user catalog call in cyclades · 755d3886
      Kostas Papadimitriou authored
      cyclades now serve a delegate view for the astakos /user_catalog api
      call. Cyclades UI app should use this endpoint to translate user uuids
      to display names.
      
      Astakos endpoint is configurable from the CYCALDES_USER_CATALOG_URL
      setting.
      755d3886
  6. 31 Jan, 2013 1 commit
  7. 11 Jan, 2013 1 commit
  8. 10 Dec, 2012 1 commit
  9. 04 Dec, 2012 1 commit
    • Dimitris Aragiorgis's avatar
      Introduce network flavors to replace network types · 9bbc33bd
      Dimitris Aragiorgis authored
      
      
      Add tags and mode to network db model. Replace existing type with
      flavor. Introduce 4 different flavors. Each flavor has mode, link,
      mac_prefix, tags. Supported flavors are CUSTOM, IP_LESS_ROUTED,
      MAC_FILTERED, PHYSICAL_VLAN and are hardcoded in db models.
      
      Introduce new function that returns flavor's mode, link, mac_prefix,
      tags.
      
      In settings only DEFAULT_ROUTING_TABLE, DEFAULT_BRIDGE and
      DEFAULT_MAC_PREFIX, DEFAULT_PRIVATE_BRIDGE exist.
      
      Introduce FIELD_POOL_MAP to map flavor fields to pool tables.
      
      Make snf-manage network-create command as flexible as possible. It is
      now able to create a network based on an existing flavor and overide
      defaults by passing mode, link, mac_prefix, tags option. Resource pools
      cannot be used by CUSTOM flavors. Currently MAC_FILTERED and
      PHYSICAL_VLAN use MacPrefixPoolTable for mac_prefix and BridgePoolTable
      for link accordingly and cannot be overriden.
      
      API blocks creation of public networks. Introduce new setting
      API_ENABLED_NETWORK_FLAVORS to indicate which flavors can the end-user
      use to create private networks.
      Signed-off-by: default avatarDimitris Aragiorgis <dimara@grnet.gr>
      9bbc33bd
  10. 30 Nov, 2012 2 commits
  11. 27 Nov, 2012 1 commit
  12. 23 Nov, 2012 1 commit
  13. 06 Nov, 2012 1 commit
  14. 02 Nov, 2012 1 commit
  15. 07 Sep, 2012 1 commit
    • Christos Stavrakakis's avatar
      Implement multiple public networks · 2b00bd8f
      Christos Stavrakakis authored
      Implement multiple public networks in order to support:
      - different public networks per backend
      - non-consecutive IP ranges in each backend
      
      To support this, public networks are treated different from private
      ones. Namely, they are correlated with one backend (and so have
      only one BackendNetwork entry) instead of private which are expanded
      to all available backends.
      
      Also the backend allocator is modified in order to exclude the backends
      that have only full networks.
      
      Finally GANETI_PUBLIC_NETWORK became obsolete, and so removed.
      
      Currently, choice of public network is done by synnefo, but in the
      future the user may be able to choose it (needs extension of the
      api with network-id)
      2b00bd8f
  16. 06 Aug, 2012 1 commit
  17. 27 Jul, 2012 5 commits
    • Christos Stavrakakis's avatar
      Add check for maximum secret encryption key · 75165452
      Christos Stavrakakis authored
      SECRET_ENCRYPTION_KEY can be up to 32 bytes long, since bigger keys are
      not supported by AES encryption. Add comment to the setting and better
      message to exception.
      75165452
    • Christos Stavrakakis's avatar
      Rename setting · 37dc8e4c
      Christos Stavrakakis authored
      Rename ENCRYPTION_KEY to SECRET_ENCRYPTION_KEY to prevent from being
      displayed at django debug traces.
      37dc8e4c
    • Christos Stavrakakis's avatar
      Revert "Start pool indexing from 0" · 2ae2ac99
      Christos Stavrakakis authored
      This reverts commit 2f998a3756c6fc7ddce9e0f83dea738e473320b8.
      2ae2ac99
    • Christos Stavrakakis's avatar
      Start pool indexing from 0 · 154f63b4
      Christos Stavrakakis authored
      154f63b4
    • Christos Stavrakakis's avatar
      Implement MAC Prefix Management · b189fa23
      Christos Stavrakakis authored
      In order to guarantee uniqueness of MAC address accross all backends,
      synnefo assignes a unique mac prefix to each network in each backend.
      
      A mac-prefix of 20 bits, which is picked from the MacPrefixPool, is
      assigned to each Network. The mac-prefix of the network in each
      backend results from combining the mac-prefix of the Network with the
      unique index of the Backend, resulting in a 3-byte mac-prefix (up to 16
      Backends).
      
      Settings PRIVATE_MAC_FILTERED_BASE_MAC_PREFIX and
      PRIVATE_MAC_FILTERED_MAX_PREFIX_NUMBER have been converted to
      MAC_POOL_BASE and MAC_POOL_LIMIT, since mac-prefixes are now assigned to
      all networks.
      b189fa23
  18. 24 Jul, 2012 1 commit
  19. 23 Jul, 2012 6 commits
    • Christos Stavrakakis's avatar
      Setting for using IP Pool to public network · 626be971
      Christos Stavrakakis authored
      Introduce new setting 'PUBLIC_ROUTED_USE_POOL', to indicate whether
      synnefo will be responsible for the IP management of the public network,
      or this responsibility will be delegated to Ganeti.
      626be971
    • Christos Stavrakakis's avatar
      Limit allowed network size · 285ce552
      Christos Stavrakakis authored
      Limit the size of networks that users can create, since big IP
      pools can have negative impact on performance. Allowed network
      size is controled by 'MAX_CIDR_BLOCK' setting.
      285ce552
    • Christos Stavrakakis's avatar
      Update network settings · 21c8e5de
      Christos Stavrakakis authored
      21c8e5de
    • Christos Stavrakakis's avatar
      Encrypt Backend password · bd491ac0
      Christos Stavrakakis authored
      Use cipher to encrypt the passwords of the Ganeti backends in the DB.
      Encryption/decryption is based on a configurable key, defined by the
      ENCRYPTION_KEY setting. After modifying this setting, synnefo will be
      unable to decrypt already stored passwords, and passwords must be
      re-entered, using 'snf-manage backend-modify' command and restaring the
      server. A migration file is responsible for initially encrypting already
      stored passwords.
      bd491ac0
    • Christos Stavrakakis's avatar
      7fec465c
    • Christos Stavrakakis's avatar
      Major modifications to Network model · 82763c03
      Christos Stavrakakis authored
      Since Ganeti version 2.6, Ganeti is aware of private networks. We take
      advantage of this by propagating network handling to Ganeti. Network
      model is expanded to include information about the type of network
      (public routed, physical vlan, private filtered), subnet, gateway, dhcp,
      link and mac_prefix.
      
      - Update Network Model and delete NetworkLink model
      - Create MacPrefixPool and BridgePool models
      - Default constant settings for MacPrefix management
      82763c03
  20. 10 Jul, 2012 1 commit
  21. 02 Jul, 2012 2 commits
    • Kostas Papadimitriou's avatar
      Update Changelog for snf-cyclades-app · 09827815
      Kostas Papadimitriou authored
      Also improve documentation of quota settings.
      09827815
    • Kostas Papadimitriou's avatar
      Simple per user quota mechanism for networks/vms · 81a40e3b
      Kostas Papadimitriou authored
      - New dict setting VMS_USER_QUOTA to allow setting per user quota
        (overrides MAX_VMS_PER_USER setting)
      - Private networks quota mechanism (based on MAX_NETWORKS_PER_USER and
        NETWORKS_USER_QUOTA settings)
      - Different response message for GANETI_MAX_LINK_NUMBER overlimit
        errors (To differentiate from user quota overlimit error). Backend
        not raises NetworkLink.NotAvailable exception when no available link
        can be created.
      - Additional unittests for vms/networks quotas
      81a40e3b
  22. 01 Jun, 2012 1 commit
  23. 30 Jan, 2012 1 commit
  24. 27 Jan, 2012 1 commit
  25. 16 Jan, 2012 1 commit
  26. 13 Jan, 2012 1 commit
    • Kostas Papadimitriou's avatar
      Improved packaging · cad199c7
      Kostas Papadimitriou authored
      - Improved automatic version tagging from git repo.
      - Added auto generated synnefo.<package>.version module to contain each
        package version.
      cad199c7
  27. 09 Jan, 2012 1 commit
  28. 24 Nov, 2011 1 commit