root / man / ganeti-rapi.sgml @ 9b94905f
History | View | Annotate | Download (3.8 kB)
1 |
<!doctype refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN" [ |
---|---|
2 |
|
3 |
<!-- Fill in your name for FIRSTNAME and SURNAME. --> |
4 |
<!-- Please adjust the date whenever revising the manpage. --> |
5 |
<!ENTITY dhdate "<date>February 11, 2009</date>"> |
6 |
<!-- SECTION should be 1-8, maybe w/ subsection other parameters are |
7 |
allowed: see man(7), man(1). --> |
8 |
<!ENTITY dhsection "<manvolnum>8</manvolnum>"> |
9 |
<!ENTITY dhucpackage "<refentrytitle>ganeti-rapi</refentrytitle>"> |
10 |
<!ENTITY dhpackage "ganeti-rapi"> |
11 |
|
12 |
<!ENTITY debian "<productname>Debian</productname>"> |
13 |
<!ENTITY gnu "<acronym>GNU</acronym>"> |
14 |
<!ENTITY gpl "&gnu; <acronym>GPL</acronym>"> |
15 |
<!ENTITY footer SYSTEM "footer.sgml"> |
16 |
]> |
17 |
|
18 |
<refentry> |
19 |
<refentryinfo> |
20 |
<copyright> |
21 |
<year>2008</year> |
22 |
<year>2009</year> |
23 |
<holder>Google Inc.</holder> |
24 |
</copyright> |
25 |
&dhdate; |
26 |
</refentryinfo> |
27 |
<refmeta> |
28 |
&dhucpackage; |
29 |
|
30 |
&dhsection; |
31 |
<refmiscinfo>ganeti 2.0</refmiscinfo> |
32 |
</refmeta> |
33 |
<refnamediv> |
34 |
<refname>&dhpackage;</refname> |
35 |
|
36 |
<refpurpose>ganeti remote API daemon</refpurpose> |
37 |
</refnamediv> |
38 |
<refsynopsisdiv> |
39 |
<cmdsynopsis> |
40 |
<command>&dhpackage; </command> |
41 |
<arg>-d</arg> |
42 |
<arg>-f</arg> |
43 |
<arg>--no-ssl</arg> |
44 |
<arg>-K <replaceable>SSL_KEY_FILE</replaceable></arg> |
45 |
<arg>-C <replaceable>SSL_CERT_FILE</replaceable></arg> |
46 |
|
47 |
</cmdsynopsis> |
48 |
</refsynopsisdiv> |
49 |
|
50 |
<refsect1> |
51 |
<title>DESCRIPTION</title> |
52 |
|
53 |
<para> |
54 |
<command>&dhpackage;</command> is the daemon providing a remote |
55 |
API for Ganeti clusters. |
56 |
</para> |
57 |
|
58 |
<para> |
59 |
It is automatically started on the master node, and by default |
60 |
it uses SSL encryption. This can be disabled by passing the |
61 |
<option>--no-ssl</option> option, or alternatively the |
62 |
certificate used can be changed via the <option>-C</option> |
63 |
option and the key via the <option>-K</option> option. |
64 |
</para> |
65 |
|
66 |
<para> |
67 |
The daemon will listen to the "ganeti-rapi" tcp port, as listed in the |
68 |
system services database, or to port 5080 by default. |
69 |
</para> |
70 |
|
71 |
<para> |
72 |
See the <emphasis>Ganeti remote API</emphasis> documentation for |
73 |
further information. |
74 |
</para> |
75 |
|
76 |
<para> |
77 |
Requests are logged to |
78 |
<filename>@LOCALSTATEDIR@/log/ganeti/rapi-daemon.log</filename>, |
79 |
in the same format as for the node and master daemon. |
80 |
</para> |
81 |
|
82 |
</refsect1> |
83 |
|
84 |
<refsect1> |
85 |
<title>ACCESS CONTROLS</title> |
86 |
|
87 |
<para> |
88 |
All query operations are allowed without authentication. Only |
89 |
the modification operations require authentication, in the form |
90 |
of basic authentication. |
91 |
</para> |
92 |
|
93 |
<para> |
94 |
The users and their rights are defined in a file named |
95 |
<filename>rapi_users</filename>, located in the <filename |
96 |
class="directory">@LOCALSTATEDIR@/ganeti</filename> |
97 |
directory. The users should be listed one per line, in the |
98 |
following format: |
99 |
</para> |
100 |
|
101 |
<screen>username password options</screen> |
102 |
|
103 |
<para> |
104 |
Currently the <replaceable>options</replaceable> field should |
105 |
equal the string <emphasis>write</emphasis> in order to actually |
106 |
give write permission for the given users. Example: |
107 |
</para> |
108 |
<screen>rclient secret write |
109 |
guest tespw |
110 |
</screen> |
111 |
<para>The first user (<userinput>rclient</userinput>) will have |
112 |
read-write rights, whereas the second user does only have read |
113 |
(query) rights, and as such is no different than not using |
114 |
authentication at all.</para> |
115 |
</refsect1> |
116 |
&footer; |
117 |
|
118 |
</refentry> |
119 |
|
120 |
<!-- Keep this comment at the end of the file |
121 |
Local variables: |
122 |
mode: sgml |
123 |
sgml-omittag:t |
124 |
sgml-shorttag:t |
125 |
sgml-minimize-attributes:nil |
126 |
sgml-always-quote-attributes:t |
127 |
sgml-indent-step:2 |
128 |
sgml-indent-data:t |
129 |
sgml-parent-document:nil |
130 |
sgml-default-dtd-file:nil |
131 |
sgml-exposed-tags:nil |
132 |
sgml-local-catalogs:nil |
133 |
sgml-local-ecat-files:nil |
134 |
End: |
135 |
--> |