764 Commits

Author SHA1 Message Date
Michael Johnson
a9fde42f6d Remove an unused configuration option
This patch removes an unused configuration option
"haproxy_cert_dir" that was flagged as a potential security
risk.

Change-Id: I31af43e8265431767544802451d9b5c297d83d28
Closes-Bug: #1548556
2016-03-09 01:28:15 +00:00
Jenkins
178f13b930 Merge "Update doc to make it consistent with the actual api" 2016-03-08 20:20:34 +00:00
Stephen Balukoff
df5f907185 Fix default_pool_id type in l7policy API
The L7Policy API type checker presently lists the redirect_pool_id
parameter as StringType(). While this is not incorrect, it is more
correct to call it a UuitType().

In addition to the above change, I removed unnecessary string length
checking on string response parameters.

No tests needed updating, as we already have good test coverage of the
validations we do on the redirect_pool_id in the L7Policy API.

Change-Id: I2bf70b51c6bc0949165f8af31c7d47c3407df08b
Closes-Bug: 1549013
2016-03-07 01:25:36 -08:00
Jenkins
74d706113c Merge "Add pre_test_hook to run gate jobs" 2016-03-06 21:03:28 +00:00
Jenkins
edab092d7e Merge "Updated from global requirements" 2016-03-06 03:47:33 +00:00
Jenkins
2b373f6dfc Merge "Remove swift related content in the sample local.conf" 2016-03-06 03:32:18 +00:00
OpenStack Proposal Bot
8cc63650fc Updated from global requirements
Change-Id: I342089b5e8a09e7e10fec6e935ecc1f515063d9d
2016-03-05 20:48:46 +00:00
Jenkins
343657a093 Merge "Better L7Policy API validations" 2016-03-05 20:23:14 +00:00
Jenkins
a46599118a Merge "Use "--pub-key" instead of "--pub_key"" 2016-03-05 19:39:51 +00:00
Jenkins
3c13912134 Merge "Adds the Cascade Deelete REST API doc" 2016-03-05 19:39:45 +00:00
Jenkins
5430c46c4c Merge "Add release notes for L7 and shared pools" 2016-03-05 19:39:39 +00:00
Jenkins
87ca28d5bc Merge "Fixed make sure to get IPv4 value by awk in sample local.sh file" 2016-03-05 19:12:08 +00:00
Jenkins
8f7a00a925 Merge "Block deletion of pool in use by L7Policies" 2016-03-04 23:36:34 +00:00
Jiahao Liang
8161b885f3 Update doc to make it consistent with the actual api
Closes-Bug: #1552965

Change-Id: I160fb31d40849230010caedd4f79e5cc7c86661a
2016-03-04 14:13:14 -08:00
madhusudhan-kandadai
d013927a7b Add pre_test_hook to run gate jobs
Tweak set of services with plugins to run gate jobs
for Octavia scenario tests.

Change-Id: Ibaecb2e0141e3ff9a19acf4c2b63aeae60e6ed9a
2016-03-04 22:12:34 +00:00
Stephen Balukoff
0fac4f2cd9 Better L7Policy API validations
Testing of the API shows that it didn't react well to having
non-essential parameters set to 'None' in update requests. This
patch moves L7Policy validations much sooner in the update process
(ie. we catch them at the API), and otherwise reorganizes most of
the L7Policy validation code into the common validations file both so
that it can be called from various locations in the code base, and
so that we can have an easier time unit testing the validation code.

Closes-Bug: 1550913
Change-Id: I7c14a8cef3d74b2b8d6f4d1ec4f6f9f32f96b9ad
2016-03-04 13:49:14 -08:00
Jenkins
5c8ebf0784 Merge "Add bandit baseline to tox" 2016-03-04 18:31:02 +00:00
chen-li
5844f9494b Remove swift related content in the sample local.conf
Swift is not default enabled by devsatck, and it is not used
by Octavia by default too. The content in the sample local.conf
is useless.

Change-Id: Ie3accb5c1be455f0212fbc07d4f5c26a55529b3c
2016-03-04 23:52:13 +08:00
chen-li
c5c50827ee Use "--pub-key" instead of "--pub_key"
Option "--pub_key" is deprecated and will be removed in novaclient 3.3.0.

Change-Id: Iaa6b12cbc3418dce40f689fb4812670784ea3018
2016-03-04 23:43:20 +08:00
OpenStack Proposal Bot
1421d34b8d Updated from global requirements
Change-Id: I08d778537cf3e9d08959772afe4613307cc4b932
2016-03-04 10:19:27 +00:00
Grant Murphy
61a9894527 Add bandit baseline to tox
Bandit baseline will check the last commit to see if
it introduced any new security problems.

Details of how bandit can be configured for the gate are
documented here:

https://wiki.openstack.org/wiki/Security/Projects/Bandit#Gate_Testing_with_Bandit

Change-Id: I791d897c4efe00bc4c0fd3b9d249e561eeb82acb
Partial-Bug: #1552002
2016-03-03 22:42:15 +00:00
German Eichberger
62cb739f8e Adds the Cascade Deelete REST API doc
Change-Id: I7dbbb95ae327abb24a3d25376020be41375a4609
Closes-Bug: #1551436
2016-03-02 13:16:53 -08:00
OpenStack Proposal Bot
79669c925c Updated from global requirements
Change-Id: Ide800fba3f55d6c60012cc474f4bb0d5534e5c77
2016-03-02 04:03:29 +00:00
Jenkins
9fe1056aa7 Merge "glance: support relying on tags to extract image id" 2016-03-01 23:06:06 +00:00
Ihar Hrachyshka
fb53fe2340 glance: support relying on tags to extract image id
Deprecated amp_image_id option with the new amp_image_tag option.

Also switched devstack plugin to rely on the tag to update the image
used for new load balancers.

Implements: blueprint use-glance-tags-to-manage-image
Change-Id: Ibc28b2220565667e15ca2b2674e55074d6126ec3
2016-03-01 20:43:33 +01:00
Stephen Balukoff
feb7a375fc Add release notes for L7 and shared pools
The previously-merged patches for L7 and shared pools did not include
release notes. This commit adds the missing release notes.

Change-Id: I0c216addf9e85d512fd2fe689db1e819d183b36c
Partially-Implements: blueprint lbaas-l7-rules
2016-02-29 22:48:56 -08:00
Trevor Vardeman
4a1acafa12 Get Me A Load Balancer Controller
Sets up the flows and some new tasks required to create all the
resources needed for an entire load balancer graph.  This includes
updating all listeners on all amphorae (depending on topology), and
plugging networks and setting up the routes and rules on every
amphora for a load balancer.  Luckily this mostly reuses tasks and
flows that were already created, though some new tasks and flows
were created specifically for handling many listeners.

Co-Authored-By: Trevor Vardeman <trevor.vardeman@rackspace.com>

Change-Id: I43a838e80281a37537e179cd8d4768f45e1ca7f1
2016-02-29 17:18:45 -06:00
Trevor Vardeman
c7d6146e59 Get me a Load Balancer API
We need the ability to send a request to the API with a fully configured
load balancer and have it create all the appropriate resources all at once.  It
will support all load balancing topologies, and all different configurations of
a load balancer.

Co-Author: Trevor Vardeman <trevor.vardeman@rackspace.com>

Change-Id: Id3a5ddb8efded8c6ad72a7118424ec01c777318d
2016-02-29 17:08:23 -06:00
Jenkins
e0e6bfca91 Merge "Cascading LB delete" 2016-02-29 22:48:27 +00:00
Jenkins
02b4199f40 Merge "Improved LoadBalancer Delete" 2016-02-29 22:43:21 +00:00
Jenkins
667bb92381 Merge "Remove old SSH specific config options from sample config" 2016-02-28 01:06:03 +00:00
German Eichberger
c22baccd98 Cascading LB delete
Adds a new cascading delete method to the REST API.
When a load balancer is deleted it will alo delete
all associated listeners, pools, memebers, healthmonitors,
and L7 Policies

Change-Id: I0fd88923dc76e573b92d83f68d292ded913b13a6
2016-02-27 10:28:38 -08:00
Adam Harwell
06f50c07ef Barbican Cert Manager fails to correctly parse intermediates
This may be a candidate for stable/liberty backport.

Change-Id: Ia61bbc7099630fa33ca0f1ee4825c2b01244c7f3
Closes-Bug: 1550535
2016-02-27 04:59:06 -06:00
Stephen Balukoff
ae82d21f0c Block deletion of pool in use by L7Policies
After a discussion, we decided that the best user experience to have if
they attempt to delete a pool in use by an l7policy (even an inactive
one) is to block the deletion. This patch implements this behavior.

Change-Id: I8b954ac6e12ec994cb63e5b56eecac7fc67c4e83
Closes-Bug: 1549097
2016-02-26 01:56:22 -08:00
OpenStack Proposal Bot
3ec5d4fa51 Updated from global requirements
Change-Id: I590c4e57f42db1f23c66dccb60fd6cdc59f6ef29
2016-02-26 01:51:44 +00:00
German Eichberger
7ca43d208f Improved LoadBalancer Delete
Removes unecessary and error causing steps from the
Delete LoadBalancer flow.

Change-Id: Ic96c7e44f223f0603dc899c9acf2cb11c57e18de
Closes-Bug: #1547256
2016-02-25 09:04:36 -08:00
Jenkins
ad84b40f42 Merge "Stop using non-existent method of Mock" 2016-02-25 02:10:29 +00:00
Jenkins
70b8f78447 Merge "Use unique SNI identifier when building data model" 2016-02-25 02:10:23 +00:00
Jenkins
29a151ded0 Merge "Implements: blueprint anti-affinity server group" 2016-02-25 02:08:35 +00:00
Jenkins
3e92919e8b Merge "Fix LB/Listener status updates for HM/Member" 2016-02-25 01:05:53 +00:00
Trevor Vardeman
428fee9748 Use unique SNI identifier when building data model
The to_data_model method previously labeled an SNI container without a
unique identifier, using the "listener_id".  Now it will use the
"tls_container_id" to ensure it is truly unique.

Change-Id: I174f8f650fc51668fd7b70e845d4706916f06295
2016-02-24 18:12:34 -06:00
Stephen Balukoff
f0cc35087a Fix LB/Listener status updates for HM/Member
Recent scenario tests are showing create operations on
pool-subordinate objects (like Member and Health Monitor) appear
to be returning too quickly with statuses that indictate the
operation is done. This has lead to intermittent problems of tests
failing because the load balancer was not in an expected state.

Our hypothesis is that the aforementioned operations are not
setting the load balancer status to PENDING_UPDATE as they should.
This patch fixes this problem, ensuring that PENDING_UPDATE status
is set on the load balancer and listener status correctly prior to
the execution of the creation taskflow, as well as whenever pool or
pool-subordinate objects are updated and deleted. This should resolve
the related intermittent scenario test failures.

In addition to the above, I have re-organized some of the API methods
to remove some code duplication between various API controller, and
re-organized several of the API functional tests for health monitors
and members to catch the above problem.

Change-Id: I5e3a1eabb76af3b913e3edbe95a3b14c3c40244b
Closes-Bug: 1548588
2016-02-24 13:38:39 -08:00
minwang
07a608f681 Implements: blueprint anti-affinity server group
https://blueprints.launchpad.net/octavia/+spec/anti-affinity
Added a new column in lb table for server group id;
Added a new task in compute tasks for creating server group;
Added a new task in dtabase tasks to update server
group id info for lb;
Add server group id in create method in nova driver to support
anti-affinity when creating compute instance

Change-Id: If0d3a9ba1012651937a2bda9bc95ab4f4c8852d5
2016-02-24 10:42:06 -08:00
Adam Harwell
42c12d7e8c Remove old SSH specific config options from sample config
Change-Id: I771ef200cd53d48abe08266ca2cb52aca711ec77
2016-02-24 11:36:00 -06:00
Jenkins
dd542b1080 Merge "Fix LB status updates" 2016-02-24 10:05:19 +00:00
Jenkins
a94b0a544c Merge "Fix amphora failover after health monitor start" 2016-02-24 10:02:31 +00:00
Jenkins
f38d3d70f3 Merge "Fix deleted amphora expiration check" 2016-02-24 10:02:28 +00:00
Jenkins
bb4e845986 Merge "Add a request timeout to the REST API driver" 2016-02-24 09:55:19 +00:00
Jenkins
e204a9ccf0 Merge "Fix health monitor URL in API documentation" 2016-02-24 09:55:16 +00:00
Jenkins
1d264babb4 Merge "Reduce devstack build time by properly using pip caches" 2016-02-24 08:43:39 +00:00