Revision 1027b01f man/gnt-cluster.rst
b/man/gnt-cluster.rst | ||
---|---|---|
539 | 539 |
| **renew-crypto** [-f] |
540 | 540 |
| [--new-cluster-certificate] [--new-confd-hmac-key] |
541 | 541 |
| [--new-rapi-certificate] [--rapi-certificate *rapi-cert*] |
542 |
| [--new-spice-certificate | --spice-certificate *spice-cert* |
|
543 |
| -- spice-ca-certificate *spice-ca-cert*] |
|
544 | 542 |
| [--new-cluster-domain-secret] [--cluster-domain-secret *filename*] |
545 | 543 |
|
546 | 544 |
This command will stop all Ganeti daemons in the cluster and start |
... | ... | |
554 | 552 |
use your own certificate, e.g. one signed by a certificate |
555 | 553 |
authority (CA), pass its filename to ``--rapi-certificate``. |
556 | 554 |
|
557 |
To generate a new self-signed SPICE certificate, used by SPICE |
|
558 |
connections to the KVM hypervisor, specify the |
|
559 |
``--new-spice-certificate`` option. If you want to provide a |
|
560 |
certificate, pass its filename to ``--spice-certificate`` and pass the |
|
561 |
signing CA certificate to ``--spice-ca-certificate``. |
|
562 |
|
|
563 | 555 |
``--new-cluster-domain-secret`` generates a new, random cluster |
564 | 556 |
domain secret. ``--cluster-domain-secret`` reads the secret from a |
565 | 557 |
file. The cluster domain secret is used to sign information |
Also available in: Unified diff