Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hi Andrija, I've setup the CloudMonkey on my local host and done some experimentation. It turns out that the API does support specifying multiple ips/networks per single ACL. The gui reflects this and shows a comma separated list. So, it looks like I can do everything I want from the

Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Actually, I was wrong and made a mistake. The ACS gui does allow specifying multiple networks/IPS on the same ACL. I had a typo when I was testing it. All jolly good! Cheers - Original Message - > From: "Andrija Panic" > To: "users" > Sent: Friday, 3 May, 2019 17:04:24 > Subject: Re:

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Andrija Panic
https://github.com/apache/cloudstack/commit/bf209405e7d60b6a5abf87677d368c429359d98a , for KVM and ROOT volumes only (didn't test it myself). On Fri, 3 May 2019 at 17:41, Razvan Rosca wrote: > Hey, > > Yeah, NFS is specified so I doubdt local storage will work, unfortunately. > > Razvan Rosca

Re: Automating creation of ACLs

2019-05-03 Thread Andrija Panic
Hi Andrei, I didn't claim that work actually - did you test it, does it actually works (if I understand correctly - you want in single rule to specify multiple CIDR ranges instead of creating a rule for each CIDR range in question) ? Best, On Fri, 3 May 2019 at 17:36, Andrei Mikhailovsky

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Razvan Rosca
Hey, Yeah, NFS is specified so I doubdt local storage will work, unfortunately. Razvan Rosca Skype: razvan.rosca Tel: +40 731 059 660 Linkedin: https://www.linkedin.com/in/razvanrosca/ Facebook: https://fb.com/razvanrosca.com On Fri, May 3, 2019 at 6:26 PM Nux! wrote: > Hi, > > All I can

Re: Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hi Andrija, I wasn't aware the API supports creating ACLs with multiple networks / IP addresses. Andrei - Original Message - > From: "Andrija Panic" > To: "users" > Sent: Friday, 3 May, 2019 16:11:37 > Subject: Re: Automating creation of ACLs > Hi Andrei, > > perhaps I got

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Nux!
Hi, All I can find right now is this, which doesn't specifically mention local storage, so will need to be tested. https://github.com/apache/cloudstack-documentation/pull/14 By the sound of it it leverages underlying libvirt capabilities. HTH -- Sent from the Delta quadrant using Borg

Re: Automating creation of ACLs

2019-05-03 Thread Andrija Panic
Hi Andrei, perhaps I got something wrong, but why don't you use API to create needed ACL rules ? Andrija On Fri, 3 May 2019 at 17:04, Andrei Mikhailovsky wrote: > Hello everyone, > > I have come across a need to create an ACLs that includes around 100 > different IP addresses and network

Automating creation of ACLs

2019-05-03 Thread Andrei Mikhailovsky
Hello everyone, I have come across a need to create an ACLs that includes around 100 different IP addresses and network ranges for several services. Now, looking at the ACS gui, there is currently no way that I could find to create an ACL with multiple IP addresses / network ranges. Not sure

Re: CS 4.12 and XS 6.5

2019-05-03 Thread Rafael Weingärtner
When I tested ACS 4.12, I used with XenServer 6.5, and it worked without problems. I have no idea on what that deprecation note means. In theory, we should not deprecate anything without creating a major release (semantic versioning.). I would expect a widespread notification and discussion

CS 4.12 and XS 6.5

2019-05-03 Thread Alessandro Caviglione
Hi guys, we're going to upgrade CS 4.9 to 4.12. Actually CS are managing some XenServer 6.5 but in Compatibility Matrix for CS 4.12 I see that XS 6.5 is deprecated. What it means? Anyone knows if XS6.5 still works or it's possible that I'll lost the management of those nodes? Thank you!

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Razvan Rosca
Hey, > you can only connect a VM into one network, so if you want to have a 2nd "private" network, that's not yet possible with Cloudstack This will not be an issue, the vast majority of users don't need any, or if they need, one will suffice. > it was possible to have local live migrations with

Re: Restricting IP usage & Upgrading CloudStack & Live storage migration

2019-05-03 Thread Nux!
Hi, In Proxmox you could use the "IP Filter" option + "Firewall in" options to restrict IP address stealing. /offtopic If you go for a Cloudstack Advanced Zone with Security Groups, then your VMs can get 1 or more public IP addresses and this is enforced automatically via iptables and

Re: Snapshots Have Stopped Running On Some VMs

2019-05-03 Thread Suresh Kumar Anaparti
Hi Asai, Secondary storage garbage collector (runs every "storage.cleanup.interval" secs) tries to cleanup all the destroyed volume snapshots. The log below has no relation with VM snapshots. As per the log, the cleanup failed for a volume snapshot as Cloudstack couldn't get the details in