- - The host will have its SSH host key replaced with the one of the
- cluster (which is the one the initial node had at the cluster
- creation)
- - A new public key will be added to root's authorized_keys file, granting
- root access to all nodes of the cluster. The private part of the key
- is also distributed to all nodes. Old files are renamed.
- - Communication between nodes is encrypted using SSL/TLS. A common
- key and certificate combo is shared between all nodes of the cluster.
- At this time, no CA is used.
- - The Ganeti node daemon will accept RPC requests from any host within the
- cluster with the correct certificate, and the operations it will do as a
- result of these requests are:
- - running commands under the /etc/ganeti/hooks directory
- - creating DRBD disks between it and the IP it has been told
- - overwrite a defined list of files on the host
+
+- The host will have its SSH host key replaced with the one of the
+ cluster (which is the one the initial node had at the cluster
+ creation)
+- A new public key will be added to root's authorized_keys file,
+ granting root access to all nodes of the cluster. The private part of
+ the key is also distributed to all nodes. Old files are renamed.
+- Communication between nodes is encrypted using SSL/TLS. A common key
+ and certificate combo is shared between all nodes of the cluster. At
+ this time, no CA is used.
+- The Ganeti node daemon will accept RPC requests from any host within
+ the cluster with the correct certificate, and the operations it will
+ do as a result of these requests are:
+
+ - running commands under the /etc/ganeti/hooks directory
+ - creating DRBD disks between it and the IP it has been told
+ - overwrite a defined list of files on the host