Skip to content

Commit 29c1f3c

Browse files
DaanHooglandandrijapanicsbnvazquezshwstpprharikrishna-patnala
authored
4.18 (#307)
Co-authored-by: dahn <daan.hoogland@gmail.com> Co-authored-by: Andrija Panic <45762285+andrijapanicsb@users.noreply.github.com> Co-authored-by: Nicolas Vazquez <nicovazquez90@gmail.com> Co-authored-by: Abhishek Kumar <abhishek.mrt22@gmail.com> Co-authored-by: Harikrishna <harikrishna.patnala@gmail.com> Co-authored-by: kiranchavala <kiranchavala@gmail.com> Co-authored-by: Brad Hards <bradh@frogmouth.net> Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com>
1 parent c6e23b8 commit 29c1f3c

15 files changed

Lines changed: 2559 additions & 2363 deletions

source/_global.rst

Lines changed: 13 additions & 13 deletions
Original file line numberDiff line numberDiff line change
@@ -17,27 +17,27 @@
1717
.. This file contain Variables shared across other .rst files in this project
1818
1919
20-
.. _CloudStack Installation Guide: https://docs.cloudstack.apache.org/projects/cloudstack-installation
21-
.. _CloudStack Administrator's Guide: https://docs.cloudstack.apache.org/projects/cloudstack-administration
20+
.. _CloudStack Installation Guide: https://docs.cloudstack.apache.org/en/latest/installguide/index.html
21+
.. _CloudStack Administrator's Guide: https://docs.cloudstack.apache.org/en/latest/adminguide/index.html
2222
.. _CloudStack Apidocs: https://cloudstack.apache.org/api.html
2323

2424
.. |documentation_home| replace:: https://docs.cloudstack.apache.org/
2525

2626
.. Latest version systemvm template name
2727
28-
.. |sysvm64-version| replace:: 4.17.2
29-
.. |sysvm64-name-xen| replace:: systemvm-xenserver-4.17.2
30-
.. |sysvm64-name-kvm| replace:: systemvm-kvm-4.17.2
31-
.. |sysvm64-name-vmware| replace:: systemvm-vmware-4.17.2
32-
.. |sysvm64-name-hyperv| replace:: systemvm-hyperv-4.17.2
33-
.. |sysvm64-name-ovm| replace:: systemvm-ovm-4.17.2
28+
.. |sysvm64-version| replace:: 4.18.0
29+
.. |sysvm64-name-xen| replace:: systemvm-xenserver-4.18.0
30+
.. |sysvm64-name-kvm| replace:: systemvm-kvm-4.18.0
31+
.. |sysvm64-name-vmware| replace:: systemvm-vmware-4.18.0
32+
.. |sysvm64-name-hyperv| replace:: systemvm-hyperv-4.18.0
33+
.. |sysvm64-name-ovm| replace:: systemvm-ovm-4.18.0
3434

3535
.. Latest version systemvm template URL
36-
.. |sysvm64-url-xen| replace:: http://download.cloudstack.org/systemvm/4.17/systemvmtemplate-4.17.2-xen.vhd.bz2
37-
.. |sysvm64-url-kvm| replace:: http://download.cloudstack.org/systemvm/4.17/systemvmtemplate-4.17.2-kvm.qcow2.bz2
38-
.. |sysvm64-url-vmware| replace:: http://download.cloudstack.org/systemvm/4.17/systemvmtemplate-4.17.2-vmware.ova
39-
.. |sysvm64-url-hyperv| replace:: http://download.cloudstack.org/systemvm/4.17/systemvmtemplate-4.17.2-hyperv.vhd.zip
40-
.. |sysvm64-url-ovm| replace:: http://download.cloudstack.org/systemvm/4.17/systemvmtemplate-4.17.2-ovm.raw.bz2
36+
.. |sysvm64-url-xen| replace:: http://download.cloudstack.org/systemvm/4.18/systemvmtemplate-4.18.0-xen.vhd.bz2
37+
.. |sysvm64-url-kvm| replace:: http://download.cloudstack.org/systemvm/4.18/systemvmtemplate-4.18.0-kvm.qcow2.bz2
38+
.. |sysvm64-url-vmware| replace:: http://download.cloudstack.org/systemvm/4.18/systemvmtemplate-4.18.0-vmware.ova
39+
.. |sysvm64-url-hyperv| replace:: http://download.cloudstack.org/systemvm/4.18/systemvmtemplate-4.18.0-hyperv.vhd.zip
40+
.. |sysvm64-url-ovm| replace:: http://download.cloudstack.org/systemvm/4.18/systemvmtemplate-4.18.0-ovm.raw.bz2
4141

4242
.. Version specific: 4.5 systemvm template URL
4343
.. |acs45-sysvm64-url-xen| replace:: https://download.cloudstack.org/systemvm/4.5/systemvm64template-4.5-xen.vhd.bz2

source/adminguide/virtual_machines.rst

Lines changed: 17 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -230,6 +230,23 @@ To access a VM directly over the network:
230230
Forwarding and Firewalling” <advanced_zone_config.html#ip-forwarding-and-firewalling>`_.
231231

232232

233+
Securing VM Console Access (KVM only)
234+
-------------------------------------
235+
236+
CloudStack provides a way to secure VNC console access on KVM using the CA Framework certificates to enable TLS on VNC on each KVM host.
237+
238+
To enable TLS on a KVM host, navigate to the host and click on: Provision Host Security Keys (or invoke the provisionCertificate API for the host):
239+
240+
- When a new host is added and it is provisioned with a certificate, TLS will also be enabled for VNC
241+
- The running VMs on a secured host will continue to be VNC unencrypted unless they are stopped and started.
242+
- New VMs created on a secured host will be VNC encrypted.
243+
244+
Once the administrator concludes the certificates provisioning on Cloudstack, the VM console access for new VMs on the hosts will be encrypted. CloudStack displays the console of the virtual machines through the noVNC viewer embedded in the console proxy System VMs.
245+
The CloudStack users will notice the encrypted VNC sessions display a green bar stating the session is encrypted as in the image below. Also, the tab title includes ‘(TLS backend)’ when the session is encrypted.
246+
247+
.. note::
248+
CloudStack will give access to the certificates to the group defined on the /etc/libvirt/qemu.conf file (or the last one defined on the file in case of multiple lines setting a group).
249+
233250
Stopping and Starting VMs
234251
-------------------------
235252

source/conf.py

Lines changed: 2 additions & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -20,7 +20,7 @@
2020
# -- Project information -----------------------------------------------------
2121

2222
project = 'Apache CloudStack'
23-
copyright = '2012-2022, Apache Foundation'
23+
copyright = '2012-2023, Apache Foundation'
2424
author = 'Apache CloudStack Project'
2525

2626
# The short X.Y version
@@ -45,6 +45,7 @@
4545
'sphinx.ext.doctest',
4646
'sphinx.ext.intersphinx',
4747
'sphinx.ext.todo',
48+
'sphinx.ext.autosectionlabel',
4849
]
4950

5051
# Add any paths that contain templates here, relative to this directory.

source/releasenotes/about.rst

Lines changed: 45 additions & 64 deletions
Original file line numberDiff line numberDiff line change
@@ -17,85 +17,66 @@
1717
What's New in |release|
1818
=======================
1919

20-
Apache CloudStack |release| is a 4.17 LTS minor release with about 20 fixes
21-
since the 4.17.1.0 release.
20+
Apache CloudStack |release| is the initial 4.18 LTS release. It has over 300 fixes
21+
and features since the 4.17.2.0 release.
2222

2323
The full list of fixes and improvements can be found in the project release notes at
24-
https://docs.cloudstack.apache.org/en/4.17.2.0/releasenotes/changes.html
24+
https://docs.cloudstack.apache.org/en/4.18.0.0/releasenotes/changes.html
2525

26-
What's New in 4.17.1.0
26+
What's in since 4.18.0.0
2727
======================
2828

29-
Apache CloudStack 4.17.1.0 is a 4.17 LTS minor release with over 150 fixes and
30-
improvements since the 4.17.0.0 release. Highlights include:
31-
32-
• Support for Ubuntu 22.04 LTS as management server and KVM host
33-
• Improvements for System VM storage migration on KVM
34-
• CKS cluster upgrade enhancements
35-
• Several network and VPC related fixes especially related IPv6 and permissions
36-
• KVM libvirt Java library upgrade
37-
• KVM Shared Mount Point fix
38-
• VMware local storage volume migration improvements
39-
40-
The full list of fixes and improvements can be found in the project release notes at
41-
https://docs.cloudstack.apache.org/en/4.17.1.0/releasenotes/changes.html
42-
43-
What's New in 4.17.0.0
44-
======================
45-
46-
Apache CloudStack 4.17.0.0 is a 4.17 LTS release with 383 new
47-
features, improvements and bug fixes since 4.16, including 16 major
29+
Apache CloudStack 4.18.0.0 is the initial 4.18 LTS release with 300+ new
30+
features, improvements and bug fixes since 4.17, including 19 major
4831
new features. Some of the highlights include:
4932

50-
• IPv6 with Static Routing
51-
• Zero Downtime Upgrades
52-
• Virtual Router Live Patching
53-
• CloudStack Status & management
54-
• User Shared Networks
55-
• StorPool storage plugin
56-
• Storage-based Snapshots for KVM Instances
57-
• Attach and detach features to UI for ROOT disks
58-
• Enable CloudStack to use multiple LOCAL storage pools
59-
• Multiple SSH Keys support
60-
• Reserve and release Public IPs
33+
• Edge Zones
34+
• Autoscaling
35+
• Managed User Data
36+
• Two-Factor Authentication Framework
37+
• Support for Time-based OTP (TOTP) Authenticator
38+
• Volume Encryption
39+
• SDN Integration – Tungsten Fabric
40+
• Ceph Multi Monitor Support
41+
• API-Driven Console Access
42+
• Console Access Security Improvements
43+
• New Global settings UI
44+
• Configurable MTU for VR
45+
• Adaptative Affinity Groups
46+
• Custom DNS Servers for Networks
47+
• Improved Guest OS Support Framework
48+
• Support for Enterprise Linux 9
49+
• Networker Backup Plugin for KVM Hypervisor
50+
• Custom Quota Tariffs
51+
• Secure VNC for KVM
6152

6253
The full list of new features can be found in the project release notes at
63-
https://docs.cloudstack.apache.org/en/4.17.0.0/releasenotes/changes.html
64-
65-
Apache CloudStack Advisory on KVM Shared Mount Point issues on version 4.17.0.0
66-
===============================================================================
67-
68-
On 14th June 2022, a new issue affecting only KVM users using Shared
69-
Mount Point storage was reported [1]. This issue affects the creation
70-
and the usage of existing Shared Mount Point storage pools on Apache
71-
CloudStack 4.17.0.0.
54+
https://docs.cloudstack.apache.org/en/4.18.0.0/releasenotes/changes.html
7255

73-
Apache CloudStack 4.17.0.0 added support for the StorPool storage
74-
based on Shared Mount Point. However, the current version of
75-
CloudStack doesn't allow multiple implementations of Shared Mount
76-
Point storage pool providers, causing the StorPool provider to
77-
override the default implementation. This affected the other storage
78-
pool providers for Shared Mount Point since CloudStack tries to add
79-
them as a StorPool storage pool.
56+
.. _guestosids
8057
81-
To mitigate the issue, a CloudStack administrator needs to do the
82-
following on version 4.17.0.0:
58+
Possible Issue with Guest OS IDs
59+
================================
8360

84-
• On each management server: stop the CloudStack management service, remove the Storpool plugin jar on /usr/share/cloudstack-management/lib/cloud-plugin-storage-volume-storpool-4.17.0.0.jar and restart the Cloudstack management service
85-
• On each KVM host: stop the CloudStack agent service, remove the StorPool plugin jar on /usr/share/cloudstack-agent/lib/cloud-plugin-storage-volume-storpool-4.17.0.0.jar and restart the CloudStack agent service
61+
It has been noticed during upgrade testing that some environment, where
62+
custom guest OSses where added and mapping for those OSses where added,
63+
problems may occur during upgrade. Part of the mitigation is to make sure
64+
OSses that are newly mapped but should have already been in the guest_os
65+
table are there. Make sure you apply those before you start the new 4.18
66+
management server.
8667

87-
Note: This workaround removes the StorPool plugin support. StorPool
88-
users should not apply the workaround to continue using their Storpool
89-
storage.
68+
first check which of the guest_os entries you miss:
9069

91-
This issue will be fixed in the upcoming CloudStack version 4.17.1.0.
70+
.. parsed-literal::
9271
93-
[1] https://github.com/apache/cloudstack/issues/6455
72+
SELECT * FROM cloud.guest_os WHERE display_name IN (´CentOS 8´, ´Debian GNU/Linux 10 (32-bit)´, ´Debian GNU/Linux 10 (64-bit)´, ´SUSE Linux Enterprise Server 15 (64-bit)´, ´Windows Server 2019 (64-bit)´)
9473
74+
Then apply any of the following lines that you might need.
9575

96-
Legacy UI Removal Notice
97-
========================
76+
.. parsed-literal::
9877
99-
The legacy UI was deprecated with Apache CloudStack 4.15 release and
100-
with 4.16 release the legacy UI has been removed. Users are encouraged to
101-
implement a migration path in their production environments.
78+
INSERT INTO cloud.guest_os (uuid, category_id, display_name, created, is_user_defined) VALUES (UUID(), '1', 'CentOS 8', now(), '0');
79+
INSERT INTO cloud.guest_os (uuid, category_id, display_name, created, is_user_defined) VALUES (UUID(), '2', 'Debian GNU/Linux 10 (32-bit)', now(), '0');
80+
INSERT INTO cloud.guest_os (uuid, category_id, display_name, created, is_user_defined) VALUES (UUID(), '2', 'Debian GNU/Linux 10 (64-bit)', now(), '0');
81+
INSERT INTO cloud.guest_os (uuid, category_id, display_name, created, is_user_defined) VALUES (UUID(), '5', 'SUSE Linux Enterprise Server 15 (64-bit)', now(), '0');
82+
INSERT INTO cloud.guest_os (uuid, category_id, display_name, created, is_user_defined) VALUES (UUID(), '6', 'Windows Server 2019 (64-bit)', now(), '0');

0 commit comments

Comments
 (0)