38670 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
Nicolas Vazquez	532852824a	Add debug logging when storage pool has insufficient IOPS capacity (#13579) ... Co-authored-by: mprokopchuk <mprokopchuk@apple.com>	2026-08-01 22:01:18 -03:00
Wei Zhou	0339f31fb5	UI: fix blank page when list Other OSes in VNF appliance deployment (#13620)	2026-07-22 12:08:13 -03:00
Nicolas Vazquez	f4c0c312f6	ConfigureStorageAccessCmd: Allow storage access configuration on empt… (#578) (#13551) ... * ConfigureStorageAccessCmd: Allow storage access configuration on empty clusters/pods/zones * update as per comments * update as per review comments * update as per comments --------- (cherry picked from commit 32736b9e262522912cf8755acabfb7400006252f) Co-authored-by: Sachin R <32716246+sachindoddaguni@users.noreply.github.com> Co-authored-by: Sachin R Doddaguni <s_rudrappadoddagu@apple.com> Co-authored-by: mprokopchuk <mprokopchuk@gmail.com>	2026-07-14 20:48:52 -03:00
Wei Zhou	17e5947a6d	server: add removed Tests for listHostsForMigrationOfVM and fix test failures	2026-07-13 11:00:37 +02:00
Wei Zhou	76a4bc8c9d	Merge remote-tracking branch 'apache/4.20' into 4.22	2026-07-13 09:58:35 +02:00
Nikolaus Eppinger	63c142be26	KVM: fix LUKS/volume-encryption detection for qemu-img >= 10.1.0 (#13587) ... qemu-img 10.1.0 changed the "qemu-img --help" supported-formats header from "Supported formats:" to "Supported image formats:". The regex in QemuImg.helpSupportsImageFormat() only matched the old header, so hostSupportsVolumeEncryption() returned false on affected hosts even though cryptsetup and the luks format were both available, blocking encrypted offerings. Make the "image" keyword optional in the regex so it matches both the legacy and current qemu-img help output.	2026-07-13 09:42:40 +02:00
Eugenio Grosso	e8df87e89b	flasharray: authenticate via REST 2.x api-token and discover API version (#13060) ... Signed-off-by: Eugenio Grosso <eugenio.grosso@gmail.com> Co-authored-by: Eugenio Grosso <egrosso@purestorage.com>	2026-07-10 16:02:07 -03:00
Erik Böck	8225668688	Fix QEMU convert command timeout for incremental snapshots (#13212)	2026-07-10 15:53:11 -03:00
Fabricio Duarte	ec2d3ea1e6	Fix findHostsForMigration never returning hosts from other clusters (#13452)	2026-07-10 13:22:58 -03:00
Wei Zhou	1c1611df2f	Ubuntu 26.04: remove requiretty from /etc/sudoers.d/cloudstack and fix setup-sysvm-tmplt (#13476) ... * debian/rules: remove requiretty from /etc/sudoers.d/cloudstack * fix scripts/storage/secondary/setup-sysvm-tmplt /tmp is a tmpfs type of filesystem ``` root@mgmt1:~# /usr/share/cloudstack-common/scripts/storage/secondary/setup-sysvm-tmplt -u 002c593f-eac9-4fee-85dd-44887a3f2042 -f /usr/share/cloudstack-m +anagement/templates/systemvm/systemvmtemplate-4.22.0-x86_64-kvm.qcow2.bz2 -h kvm -d /tmp/tmp5782242889444060623/template/tmpl/1/3 .... Insufficient free disk space for target folder /tmp/tmp5782242889444060623/template/tmpl/1/3: avail=1739872k req=2120000k root@mgmt1:~# mount | grep /tmp tmpfs on /tmp type tmpfs (rw,nosuid,nodev,nr_inodes=1048576,inode64,usrquota) ``` * marvin: revert mysql-connector-python to 8.0.30 * Apply "mysql-connector-python >= 8.4.0", * register systemvm template via /var/tmp in java too * Revert "register systemvm template via /var/tmp in java too" This reverts commit c0147c5e90. * mgmt: add -Djava.io.tmpdir=/var/tmp to JAVA_OPTS * fix scripts/storage/secondary/createtmplt.sh	2026-07-10 15:28:33 +02:00
Wei Zhou	265b554d60	Fix 4.22 build failures after forward-merge and rename 42010to42100 to 42040to42100	2026-07-10 13:30:05 +02:00
Wei Zhou	c7e2c748f7	Merge remote-tracking branch 'apache/4.20' into 4.22	2026-07-10 13:29:39 +02:00
Rene Peinthor	57671274d8	linstor: fix encrypted volume snapshot backup and restore (#13486) ... Encrypted Linstor volumes use a LUKS layer inside the DRBD stack, so the storage-layer snapshot device holds ciphertext while the DRBD device CloudStack restores to is the decrypted view. Backing up the raw snapshot and writing it back to the decrypted device corrupted the volume (different data, unbootable root). Back up encrypted snapshots from the decrypted DRBD device (forcing the temporary-resource path) and store them as a LUKS-encrypted qcow2 using the volume passphrase, so snapshots are not kept in clear text on secondary storage. On revert, decrypt the qcow2 and write plaintext to the DRBD device; the LUKS layer re-encrypts it. The qemu-img shrink is skipped for encrypted volumes (the DRBD device is already net-sized). Add an integration test (test_linstor_encrypted_snapshots.py): the encrypted-root snapshot revert round-trip, that create-volume-from-encrypted-snapshot is rejected by CloudStack core, and a best-effort check that the backed-up qcow2 is LUKS-encrypted at rest.	2026-07-10 12:50:33 +02:00
Vishesh	a4b102fb3f	Fix skip DRS for a VM (#12994)	2026-07-09 14:55:54 +02:00
Josh Gordon	a951ac61d0	UI: Don't set management server ID if cookie isn't set (#13404)	2026-07-06 21:13:13 +02:00
Suresh Kumar Anaparti	4262c026d0	KVM HA: Fix CheckOnHostAnswer success flag when there is no heartbeat (#13373)	2026-07-06 13:56:04 +02:00
Suresh Kumar Anaparti	9e8855a6f5	Add async job event bus publisher (#12971) ... * Async event bus publishing in AsyncJobManagerImpl to reduce API thread contention publishOnEventBus() was calling _messageBus.publish() synchronously on the request thread, which blocks on MessageBusBase$Gate (an exclusive mutex). JFR analysis showed this causing up to 107ms waits on Jetty request threads, contributing to 502 errors from the upstream load balancer. Move event bus publishing to a dedicated single-threaded executor so API request threads are no longer blocked by Gate contention. Event ordering is preserved by the single-threaded executor. * Wrap async event bus publish in ManagedContextRunnable for DB connection safety The sole subscriber (ApiServer.handleAsyncJobPublishEvent) performs DAO reads (getUserIncludingRemoved, getAccount, findById) inside its callback. Without ManagedContextRunnable, the EventBus thread would not have proper TransactionLegacy lifecycle management, risking DB connection leaks. * logger fix * review comments * review changes --------- Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-07-06 07:54:34 -03:00
dahn	7c2a8768e6	check state instead of power state on change offering for ROOT volume (#13271) ... * check state instead of power state on change offering for ROOT volume * tests * Apply suggestions from code review Co-authored-by: Fabricio Duarte <fabricio.duarte.jr@gmail.com> Co-authored-by: dahn <daan.hoogland@gmail.com> * Apply test by package private * fixing tests --------- Co-authored-by: Daan Hoogland <dahn@apache.org> Co-authored-by: Fabricio Duarte <fabricio.duarte.jr@gmail.com>	2026-07-06 14:41:25 +05:30
Abhisar Sinha	daa2e61eef	Fix encryption and migration not working on Shared mountpoint (#13537)	2026-07-06 08:08:04 +02:00
Nicolas Vazquez	135922fa63	listHosts: add 'core' details (#13444) ... * listHosts: add 'core' details * Include msid response and integrate core details into the base response method Co-authored-by: abennatan <a_bennatan@apple.com>	2026-07-03 17:48:10 +05:30
Wei Zhou	348ceaff33	kvm: get ip address of Windows vms via virsh domifaddr (#12651)	2026-07-01 20:29:54 +02:00
Wei Zhou	c8b7816d5e	marvin: install mysql-connector-python >= 8.4.0 (#13482)	2026-07-01 16:59:18 +02:00
Pearl Dsilva	006831daaf	UI: Prevent failure when loading network offerings when physical network has a tag (#13503) ... Co-authored-by: Pearl Dsilva <pearl1954@gmail.com>	2026-07-01 10:25:09 +02:00
Jtolelo	097a57967b	systemvm: emit IPv6 prefix block for redundant VPC VRs in radvd.conf (#13127)	2026-06-30 09:06:53 +02:00
Rene Peinthor	0231e67b9d	Linstor: Add controller token auth support (#13470) ... * linstor: update java-linstor to 0.7.0 to support auth token api With Linstor 1.34.0 a new authentication mode is supported: * Bearer token To support that it had to be implemented in the java-linstor library and we need to store the auth token per storage pool. Also per default with this auth mode Linstor will run with HTTPS enabled, so we also have to support that. * ui: seed default-on toggles in zone wizard while hidden StaticInputsForm.fillValue() only seeded defaults for currently-displayed fields, so a display-gated switch with checked:true bound to an undefined value and rendered as off once revealed. Seed checked switch/checkbox fields even while hidden, so the Linstor 'Allow self-signed certificate' toggle defaults on in the zone creation wizard.	2026-06-29 20:15:56 +02:00
Wei Zhou	2ba02c1a4a	systemvm: fix VPC VPN issue when network id is bigger than 1000 on Netris (#13346)	2026-06-29 16:52:14 +02:00
Vishesh	4625a43672	Batch NIC and VLAN reads in collectVmNetworkStatistics to reduce per-NIC DB round-trips (#13474) ... Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-06-29 15:45:56 +02:00
Daan Hoogland	d5101b0c90	Merge branch '4.20' into 4.22	2026-06-29 15:33:26 +02:00
Suresh Kumar Anaparti	f49ab6b394	API rule regex optimization (#13109) ... Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-06-25 17:18:05 +02:00
Abhishek Kumar	2eb9820f3c	framework-jobs,server: fix password obfuscation for job result and password with display=false (#13388) ... * framework-jobs: fix password obfuscation for job result Fixes #13387 Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com> * add password as hidden Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com> --------- Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com>	2026-06-23 15:37:51 +05:30
Wei Zhou	288f9a9fd7	framework/spring: throw RuntimeException when fail to start or load a module (#13186)	2026-06-22 08:22:27 +02:00
Bernardo De Marco Gonçalves	b36f06482f	fix misleading error message (#13450)	2026-06-22 08:14:51 +02:00
Gustavo Rück	78d9cb5abd	dynamic vm.network.throttling.rate global configuration (#12567) ... Co-authored-by: Gustavo Rück <gustavo.silveira@scclouds.com.br>	2026-06-21 13:27:50 +02:00
Vishesh	6227525c84	Optimize UsageJobDaoImpl.updateJobSuccess to use direct UPDATE instead of row-level lock (#13160) ... Co-authored-by: Aaron Chung <aaron_chung@apple.com>	2026-06-18 10:42:51 -03:00
Suresh Kumar Anaparti	95d0aed9f5	Additional metrics for virtual machine orchestration (#13141) ... Signed-off-by: Alakesh Haloi <a_haloi@apple.com> Co-authored-by: Alakesh Haloi <a_haloi@apple.com> Co-authored-by: Tanisha Ghai <tghai@apple.com>	2026-06-18 09:19:24 +02:00
Suresh Kumar Anaparti	aef91ae324	Add OpenTelemetry tracing instrumentation to API layer (#13132) ... Co-authored-by: tmckeon <tmckeon@apple.com> Co-authored-by: Claude Opus 4.6 (1M context) <noreply@anthropic.com>	2026-06-18 08:47:35 +02:00
Pearl Dsilva	4244c2cc10	UI: Allow selecting network for VNF nics if template is a non deploy-as-is template (#13423) ... * Allow selecting network for VNF nics if template nics > 0 and is a non-deploy as is template * delpoy as is param not required --------- Co-authored-by: Pearl Dsilva <pearl1954@gmail.com>	2026-06-18 08:30:20 +02:00
Pearl Dsilva	e689c02b68	UI: Allow selecting network for VNF nics if template is a non deploy-as-is template (#13423) ... * Allow selecting network for VNF nics if template nics > 0 and is a non-deploy as is template * delpoy as is param not required --------- Co-authored-by: Pearl Dsilva <pearl1954@gmail.com>	2026-06-18 08:28:44 +02:00
Gustavo Rück	b26b70c40d	Fix public IP range addition form (#13356) ... Co-authored-by: Gustavo Rück <gustavo.silveira@scclouds.com.br>	2026-06-17 10:16:08 +02:00
Wei Zhou	0bbea20062	server: fix NPE when migrate vm away with volumes (#13131)	2026-06-13 07:45:01 +02:00
Suresh Kumar Anaparti	d35c1cd3ff	Remove the duplicate configkey json.content.type (#13264)	2026-06-11 15:39:24 -03:00
Abhisar Sinha	7bc458ff85	Fix for usage server getting stuck due to duplicate VM events (#13019)	2026-06-11 15:20:33 -03:00
Abhishek Kumar	8e933b735e	ui: do not show deploy instance button for not ready images (#13161) ... Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com> Co-authored-by: Copilot Autofix powered by AI <175728472+Copilot@users.noreply.github.com>	2026-06-11 10:15:54 -03:00
Erik Böck	a3970bb153	Fix convert command's timeout for snapshot commands (#13210)	2026-06-01 10:29:33 -03:00
Eugenio Grosso	357186d64d	flasharray: fall back to array capacity when pod has no quota (#13050) ... Signed-off-by: Eugenio Grosso <eugenio.grosso@gmail.com> Co-authored-by: Eugenio Grosso <egrosso@purestorage.com>	2026-05-27 17:16:52 -03:00
Tonitzpp	b642bbe38e	Fix the validation of CPVMs states in multiple zones (#13021) ... Co-authored-by: Toni Zamparetti <toni.zamparetti@scclouds.com.br> Co-authored-by: Bernardo De Marco Gonçalves <bernardomg2004@gmail.com>	2026-05-27 13:36:31 +02:00
Abhisar Sinha	ff9ee24d12	Fix local upload from browser failing due to ssvm cert not trusted (#13204)	2026-05-26 13:27:33 +05:30
Fabricio Duarte	21b2025c50	Merge release branch 4.20 to 4.22 ... * 4.20: Fix/flasharray delete rename destroy patch conflict (#13049) Fix VPC network offerings listing in isolated network creation form (#12645) Update mysql java connector version to 8.4.0 (matching version for MySQL 8.4) (#12640) adaptive: honor user-provided capacityBytes when provider stats are unavailable (#13059) Flexibilize public IP selection (#11076)	2026-05-22 08:31:35 -03:00
dahn	d1e1aa5d20	VM Deployment using snapshot in new zone (#13178)	2026-05-21 14:36:22 +02:00
João Jandre	35ac91e58b	Change exception treatment on incremental snapshot wait (#12665)	2026-05-19 17:24:32 -03:00