RAPI changes for instance moves
Two new resources are added:- /2/instances/$name/prepare-export- /2/instances/$name/export
The documentation for the existing resource for creating instances is updatedfor remote imports. The RAPI client is extended for the new resources....
Merge branch 'devel-2.1'
Add missing documentation for RAPI instance creation mode
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Conflicts: daemons/ganeti-noded lib/daemon.py lib/rapi/baserlib.py lib/rapi/rlib2.py lib/utils.py
Signed-off-by: Luca Bigliardi <shammash@google.com>Reviewed-by: Michael Hanselmann <hansmi@google.com>
RAPI: Add new request data format for instance creation
As mentioned in commit d975f482d, the current way of creating aninstance via RAPI is not very flexible. With this patch, a newinstance creation request data format is introduced and documented.Support can be detected by checking the list of features returned...
Mention RAPI client in documentation
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Add new /2/features RAPI resource
The /2/features RAPI resource can be used to detect optionalfeatures implemented by the RAPI server. This will be usedto recognize servers implementing a new request format forinstance creation requests.
Signed-off-by: Michael Hanselmann <hansmi@google.com>...
Node daemon availability improvements proposal
Signed-off-by: Luca Bigliardi <shammash@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
install.rst: update os version and add KVM notes
The 0.7 version was just an example, but since we're on 0.9 now,updating the number cannot be wrong. The new admonition helps KVM usersto configure debootstrap correctly so that instances can be shutdown...
RAPI: Allow waiting for job changes
Conflicts: doc/security.rst trivial lib/cli.py trivial
Signed-off-by: Balazs Lecz <leczb@google.com>Reviewed-by: Michael Hanselmann <hansmi@google.com>
security.rst: add a KVM security section
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Add user-id pool design doc
Signed-off-by: Balazs Lecz <leczb@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Forward-port the ganeti 2.0 cfgupgrade
2.1's cfgupgrade doesn't support upgrading from 1.2, only from 2.0.However, it's trivial to forward-port the 2.0 cfgupgrade to work with2.1, thus providing an upgrade path for 1.2 users directly to 2.1,without the intermediate step of installing 2.0....
Add a new tool: sanitize-config
This can be used for two purposes:
- safety copy of the config file, with just the secrets changed- cleanup of the config file (full randomization), so that (e.g.) users could send a broken config file to the devel-list...
Improving the RAPI documentation
Signed-off-by: René Nussbaumer <rn@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Merge remote branch 'devel-2.1'
Update import documentation for the recent changes
Signed-off-by: Iustin Pop <iustin@google.com>Reviewed-by: Michael Hanselmann <hansmi@google.com>
Document the watcher node maintenance feature
The patch changes significantly the watcher man page, as it was verysimplistic.
Signed-off-by: Iustin Pop <iustin@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Adding missing documentation to make the docs better
Also fixed a typo I noticed.
utils: Add functions to sign and verify X509 certs using HMAC
Certificates exchanged via an untrusted third party should besigned to ensure they haven't been modified.
Merge remote branch 'origin/devel-2.1'
Update instance modify documentation
Update documentation for disk adoption
ganeti.initd: Move all daemon names from init script to daemon-util
The list of daemon names will be used in daemon-util, too.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Iustin Pop <iustin@google.com>Reviewed-by: René Nussbaumer <rn@google.com>
ganeti.initd: Move code checking daemon exit code to daemon-util
This is again for re-using code.
ganeti.initd: Move code checking config to daemon-util
This allows for more code re-use. daemon-util will also be used to startall daemons.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: René Nussbaumer <rn@google.com>
Update inter-cluster instance move design with HMAC signatures
This also adds a large piece of pseudo code for explanatory purposes.
Update documentation for hashed passwords
Clarify cluster nic parameters in install.rst
There were a few outdated options specified there. This patch unifiesthe description under only one section, and updates it.
Add make target to generate unittest coverage report
Update the IAllocator documentation
This should be rewritten from a 'change document' (e.g. "Ganeti onlysupports...") to a 'current implementation document', but in themeantime we can at least update it with the multi-evac changes.
Signed-off-by: Iustin Pop <iustin@google.com>...
Merge remote branch 'origin/stable-2.1' into devel-2.1
Adding design doc for cluster merger
Signed-off-by: René Nussbaumer <rn@google.com>Signed-off-by: Iustin Pop <iustin@google.com>Reviewed-by: Iustin Pop <iustin@google.com>(applied slightly modified patch)
Update inter-cluster instance move design with HMAC verification
Run instance hooks on more nodes
This should fix issue 68: some hooks should be run on more nodes thancurrently. GrowDisk runs on both nodes, remove run the post hook on theinstance's nodes, and failover and migrate run the post hook on thesource node too....
Add {NEW,OLD}_{PRIMARY,SECONDARY} vars to hooks
Per issue 71, the migrate and failover need special variables forkeeping the nodes consistent during instance migrations.
Fix confd procotol design description
The protocol design for confd was missing a description of the fourcccode which we use to distinguish between different message types, if wewant to completely change the protocol. Adding them so that someoneimplementing it can find out....
Initial design for inter-cluster instance moves
Initial KVM security improvement design for 2.2
Provide example default files and install one for development
install.rst: note about the default parameters
As we know, those are just defaults, mostly chosen by replicating theonly behavior we supported before allowing customization. They may needchanges, to work in specific environments (which is why we introduced...
Inter-node RPC timeout design
Add template Ganeti 2.2 design doc
Signed-off-by: Guido Trotter <ultrotter@google.com>
A couple of doc updates
Clarify the fact that temporary HV/BE params in instance start overrideand do not extend the configured parameters; and change the instancelist headers from HVM_* to * since many of the parameters apply to KVMtoo. Also fix a typo in the rapi documention for '/2/nodes'....
Add packaging notes to documentation
This includes a few paragraphs about daemon-util.
Include INSTALL in documentation
Convert INSTALL to RST
This is in preparation to including it into the largedocumentation.
Update RAPI documentation on job results
This documents the new error classifier added for OpPrereqError.
Documentation updates for the global hvparams
This patch does multiple documentation updates for the new framework,all pretty straightforward.
Fix the init script
The rewrite after the introduction of the daemon-util script has acopy-paste error.
Add new “daemon-util” script to start/stop Ganeti daemons
Until now, Ganeti started and stopped its own daemons using custom functions.To start, the daemon was just executed and then sent the appropriate signals tostop it again. Init scripts would have to pay attention to the PID file and...
Add an example script for backing up the config
This requires git and lockfile-progs, and only backs up config.data (seethe comments why).
Add remote API users and passwords documentation
Documentation updates
Our admin guide was very very trivial. This patch updates it to containadvice on when to use which commands, removes the instanceadministration part from the installation guide (moved to the adminguide), and adds a walkthrough document that should be useable as a...
Include NEWS in documentation again
This was implemented in 350ecfecca and reverted in 700bb84367after it broke “make distcheck”. With other changes in thispatch series this will work now.
Contributing to the original problem was that the news.rst file...
init script: allow singling out confd as well
Currently we can start/stop the various subdaemons, but not confd.
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Olivier Tharan <olive@google.com>
Fix typo in install.rst
install.rst: mention xen config for live migration
This addresses issue 75.
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Michael Hanselmann <hansmi@google.com>
ethers hook: allow more than one daemon pidfile
Improve description of migrate/failover post hooks env
Update env vars for instances in hooks documentation
Remove variables which are listed at the beginning of the section and variableswhich are not declared when building hooks env.
Wrap documentation to max 72 characters per line
Set Vim textwidth in each documentation file
Add documentation on manual cluster cleanup
Add implementation details for 2.1 locking changes
Install guide: talk about routing mode
The networking section is updated to talk about both routing andbridging.
Update hypervisor installation section
Currently the section is called "Installing Xen" and also mentions KVM.Updating the title and also make it slightly less xen-centric.
Design doc changes for UUID tracking of objects
Re-wrap locking changes design to 76 chars per line
Revert "Include NEWS file in documentation"
This reverts commit 350ecfecca136f50877898774c6b40014b5c2b1c. It brokedistcheck.
Include NEWS file in documentation
Explain the reason for fqdn hostnames
The install guide asks the user to use the fqdn in the hostname, butdoesn't explain why. This has been asked multiple times, so adding anexplanation there.
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Iustin Pop <iustin@google.com>...
Add locking improvements to Ganeti 2.1 design document
Also increase the table of contents' depth to 4.
Move developer notes into normal documentation
Add locking doc to Ganeti documentation
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Luca Bigliardi <shammash@google.com>
Add RAPI resource to redistribute config
rapi doc: Add …/nodes/[name] and …/instances/[name]/reinstall
Update hooks documentation
Example IPsec hook
This hook is a simple example which automatically configures a basic IPsec linkamong all the nodes of a cluster.
Signed-off-by: Luca Bigliardi <shammash@google.com>
Merge branch 'next' into branch-2.1
Add script to clean archived jobs after 21 days
Document cluster destroy hook
Add documentation about new cluster-destroy-post hook.
Signed-off-by: Luca Bigliardi <shammash@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Document post cluster initialization LU
Update hooks documentation with the new opcode (not deleting OP_INIT_CLUSTERfrom obsolete operations because the name is different).
node-remove post on removed node
Run post phase of node-remove on the removed node as well.
Use script to generate bash completion
Completion for tools/burnin is not yet implemented. It needs to beconverted to definition-based options handling first.
design-2.1: specify hmac key permissions
design-2.1: clarify confd usage of serial numbers
rapi: Add /2/instances/[instance_name]/info resource
rapi: Add /2/nodes/[node_name]/storage/repair resource
Improve the example startup script
Currently, the supplised script has two issues: - it doesn't use start-stop-daemon --start correctly, leading to messages like "ganeti.errors.GenericError: /var/run/ganeti/ganeti-rapi.pid contains a live process" in the logs...
Fix insserv dependencies
(import of a Debian patch)
This patch removes xend from the list of dependencies.
Ganeti doesn't need xend running to startup, it will only need it later(and only if xen is used as virtualisation technology). It also removes'Xen' from the description in the init script....