https://review.openstack.org/#/c/69187/ introduced SSL certificate checking
in python-swiftclient (released as v2.0). This patch ensures that the version
of swiftclient used will verify SSL certificates correctly.
This patch also documents the `swift_store_auth_insecure` configuration
option for bypassing the cert verification
DocImpact
SecurityImpact
Change-Id: I20ddab5c3359071daf7505268c72331e4c786987
Due to a bad regex, the glance-replicator tool rejects any source or
target host:port combination that contains a period. As a result, only
hostnames without periods can be used.
This fix expands the host/port checks to:
- allow periods in hostnames
- allow and verify IPv6 addr/port pairs (i.e., [fe80::f00d:face]:1234)
- allow and verify IPv4 addr/port pairs (i.e., 172.17.17.2:1234)
- sanity-check port numbers
This also includes extensive tests for each component of the parsing,
and adds network_utils to openstack-common.conf.
Change-Id: I94fdd7a57a4cb0aa5d79f66d68be159d1f1266d1
Closes-Bug: #1216247
Currently, the VMware store is using its own copy of the
VMwareApiSession to connect to vCenter server and ESX(i).
This patch gets rid of this copy to use the oslo.vmware library.
Closes-Bug: #1282715
Change-Id: I0aa47eada388c09d9835b00fb2c93f50f22675a4
glance uses OpenSSL.crypto.sign() and OpenSSL.crypto.verify(), which
are new in pyOpenSSL 0.11. Global requirements already fixed, do the
same change in glance
Change-Id: Ide1d180cd1966cac454d7d5d3b6475a04591735c
Partial-Bug: #1268966
Customers using a VMware environment with OpenStack should be able to
store their Glance images in VMware datastores. This is a first step to solve
the problem where Nova needs to copy the bits over the network
from Glance to the datastore when spawning an instance.
Also, this give the ability to provide some optimizations for specific
image formats in the future (fast cloning for example).
This patch contains a 'glance/store/vmware/' folder with the code
to manage the connection with vCenter or an ESX(i) host.
This code will go away as soon as it is merged to Olso:
see review https://review.openstack.org/#/c/65075/
The current implementation give this ability to specify the vCenter or
ESX(i) IP. In case of a vCenter IP, there is no optimization to reduce
the datapath (no host selected).
Consequently, it is recommended to specify an ESX IP if the ESX host
API endpoint is accessible from Glance.
docImpact
Implements bp vmware-datastore-storage-backend
Change-Id: I3837912e0d1614b9c31a689f71c2e34d453e2dc3
An image can be saved to more than one backend storage by multi-location
mechanism, Glance should have a capability to select the best backend
storage for improving image consuming performance. This change
implements two strategy modules: "location_order" and "store_type", and
allow Admin configure some strategy-specified options for Glance as
their deployment required.
As an end user, he can get VM or consuming image faster base on this
enhancement. This is not only for 'download' transport handling on the
API server side but also for client since they can obtain locations by
standard 'direct URL' interface.
docImpact
Implements bp: image-location-selection-strategy
Change-Id: I86f192aeae8e5f21a72f946552f6507654c25a6c
Signed-off-by: Zhi Yan Liu <zhiyanl@cn.ibm.com>
Glance currently uses a custom notifier and it has been maintaining it
for a long time. In a hope of reducing duplicated code and improving
cross-project contributions, this patch replaces the old notifier with
the one, recently developed, in oslo.messaging.
The oslo.messaging project is a port of the old oslo-rpc code to a
standalone, more stable and improved project. It brings all the benefits
that oslo-rpc would've brought as well as an easier way to integrate
with other projects.
This patch also:
- Reduces the code shipped along with Glance since all the code
copied from oslo-incubator related to the notifier is not needed
anymore.
- Improves the stability of existing, broker based, notifications.
- Brings HA support.
- Keeps backward compatibility by translating the old
`notifier_strategy` into oslo.messaging drivers.
Changes to the code:
- It is now necessary to pass the request context to the
notification call.
- Notifier package is no longer necessary. A notifier module was
added instead.
- New, notifier related, configurations were added.
- A lot of code was removed
Since there's still not an official release, requirements.txt points to
the latest tarball created. A release for oslo.messaging is planned for
Icehouse.
docImpact
Implements bp oslo-messaging
Change-Id: I8cd84772bc5867e06b2a50ed7e15b9e86f0b94ad
This patch is similar to https://bugs.launchpad.net/glance/+bug/1252344.
Currently wsgiref/passlib package exist in requirement.txt,
but I confirmed that they are unused in glance source by "grep" command.
I removed them to clean up.
Closes-bug: #1255826
Change-Id: Ibbc2f1d413efacd0c18ba16c9250ef08470667d1
Removes the need for ordereddict source to exist in the project.
Uses collections.OrderedDict for python2.7 and above and falls
back to ordereddict.OrderedDict for python2.6
Fixes bug 1229569
Change-Id: Iaf8b500d7b340f370df239bfe9ab0656575dc93b
1. Sync requirements from global.
2. iso8601>=0.1.7 "parse_date()" could successfully handle date string
which only have date part like YYYY-MM-DD, it caused two Glance test
cases failure.
Fixes bug: 1242501
Change-Id: I2625eb3888111829a9da4d093b34193b8795f264
Signed-off-by: Zhi Yan Liu <zhiyanl@cn.ibm.com>
Now that 1.2.0 has been released, require it rather than one of the beta
release tarballs.
Closes-Bug: #1182861
Change-Id: I75ffc4a572d14488d19491a38742d6920951c171
Add a new glance-api.conf parameter 'swift_store_ssl_compression',
which allows disabling SSL layer compression for https swift requests.
This can increase performance when transferring compressed images (eg
qcow2) to/from swift.
Addresses bug 1190666.
DocImpact.
Change-Id: Ic26dba9dce5ea7e5c09fdd531746b93cec54fc5c
The patch replaces current Oslo version with 1.2. The change is needed
to pull in a fix released in that specific version, which fixes the
issue #1175570. The fix we're interested in is giving priority to CLI
arguments instead of config files. Without this, commands like the one
below won't work.
$ glance-manage --sql_connection=.... db_sync
Oslo's release notes:
http://docs.openstack.org/developer/oslo.config/#a3
Closes-Bug: #1175570
Change-Id: I4ea749cfaae0e18e035abe7b5d7e345dda7d476d
Glance PATCH API need use new 'require' condition for schema to validate
income requests.
Raise jsonschema requirement to >=1.3.0,!=1.4.0.
See bug #1202391 for details.
Change-Id: I3b8054b25f2b3d9ed0c3dd1be320f7402ceb9635
Signed-off-by: Zhi Yan Liu <zhiyanl@cn.ibm.com>