History | View | Annotate | Download (3.1 kB)
kvm-vif-bridge: properly remove old firewall rules
Since kvm-vif-bridge is stateless, i.e. we don't know whether the instance wason the same firewall class or even had the same tap interface, we have to try aforced removal of all firewall rules for (tap,) x (protected,limited,unprotected)....
Agree on consistent instance tags for firewalling
Update both the default API settings and the kvm-vif-bridge scriptto use consistent {protected, unprotected, limited} tags to determinethe firewall profile to use on public network interfaces.
The API spec still defines the {ENABLED, DISABLED, PROTECTED} keywords,...
Remove mac2eui64 from contrib/ganeti-hooks
contrib/hooks ships mac2eui64 that kvm-vif-bridge currently uses.kvm-vif-bridge depends on nfdhcpd, which ships that on /usr/bin, so usethat copy instead and remove our own copy.
Note that the same is also shipped under util/mac2eui64.py which is not...
Make nfdhcpd dir configurable in kvm-vif-bridge
Merge branches api-current and ui-0.4, minor fixes
Merge branches api-current and ui-0.4: * Fix merge conflicts * Fix minor bug in reconciliation mgmt command * Add comments in settings.py.dist * minor PEP8 fixes