Locking related fixes for networks

[ganeti-local] / NEWS

diff --git a/NEWS b/NEWS
index 562f06e..0e4fa66 100644 (file)
--- a/NEWS
+++ b/NEWS
@@ -2,6 +2,39 @@ News
 ====
 
 
+Version 2.7.0 beta1
+-------------------
+
+*(unreleased)*
+
+- ``gnt-instance batch-create`` has been changed to use the bulk create
+  opcode from Ganeti. This lead to incompatible changes in the format of
+  the JSON file. It's now not a custom dict anymore but a dict
+  compatible with the ``OpInstanceCreate`` opcode.
+- Parent directories for file storage need now to be listed in
+  ``$sysconfdir/ganeti/file-storage-paths``. ``cfgupgrade`` will write
+  the file automatically based on old configuration values, but it can
+  not distribute it across all nodes and the file contents should be
+  verified. Use ``gnt-cluster copyfile
+  $sysconfdir/ganeti/file-storage-paths`` once the cluster has been
+  upgraded. The reason for requiring this list of paths now is that
+  before it would have been possible to inject new paths via RPC,
+  allowing files to be created in arbitrary locations. The RPC protocol
+  is protected using SSL/X.509 certificates, but as a design principle
+  Ganeti does not permit arbitrary paths to be passed.
+- The parsing of the variants file for OSes (see
+  :manpage:`ganeti-os-interface(8)` has been slightly changed: now empty
+  lines and comment lines are ignored for better readability.
+- The ``setup-ssh`` tool added in Ganeti 2.2 has been replaced.
+  ``gnt-node add`` now invokes a new tool on the destination node, named
+  ``prepare-node-join``, to configure the SSH daemon. Paramiko is no
+  longer necessary to configure nodes' SSH daemons via ``gnt-node add``.
+- A new user option, :pyeval:`rapi.RAPI_ACCESS_READ`, has been added
+  for RAPI users. It allows granting permissions to query for
+  information to a specific user without giving
+  :pyeval:`rapi.RAPI_ACCESS_WRITE` permissions.
+
+
 Version 2.6.1
 -------------