History | View | Annotate | Download (25.8 kB)
utils: Add functions to sign and verify X509 certs using HMAC
Certificates exchanged via an untrusted third party should besigned to ensure they haven't been modified.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Update inter-cluster instance move design with HMAC signatures
This also adds a large piece of pseudo code for explanatory purposes.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Update inter-cluster instance move design with HMAC verification
Initial design for inter-cluster instance moves
Initial KVM security improvement design for 2.2
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Iustin Pop <iustin@google.com>
Inter-node RPC timeout design
Add template Ganeti 2.2 design doc
Signed-off-by: Guido Trotter <ultrotter@google.com>