Statistics
| Branch: | Tag: | Revision:

root / src / Ganeti @ 1264bd58

Name Size
  Confd
  Cpu
  Curl
  DataCollectors
  HTools
  Hs2Py
  Hypervisor
  Monitoring
  Query
  Storage
  THH
BasicTypes.hs 9.3 kB
Common.hs 14.4 kB
Compat.hs 1.4 kB
Config.hs 14.8 kB
ConfigReader.hs 10.8 kB
ConstantUtils.hs 5.3 kB
Constants.hs 118.1 kB
Daemon.hs 15.6 kB
Errors.hs 6.5 kB
Hash.hs 1.8 kB
JQScheduler.hs 9.1 kB
JQueue.hs 16.4 kB
JSON.hs 10.9 kB
Jobs.hs 3.3 kB
Logging.hs 4.9 kB
Luxi.hs 11.9 kB
Network.hs 3.5 kB
Objects.hs 25.2 kB
OpCodes.hs 26.9 kB
OpParams.hs 46.2 kB
Parsers.hs 1.7 kB
Path.hs 3.9 kB
PyValue.hs 2.9 kB
Rpc.hs 20.8 kB
Runtime.hs 7.1 kB
Ssconf.hs 5.2 kB
THH.hs 46.5 kB
Types.hs 28.2 kB
UDSServer.hs 11.3 kB
Utils.hs 22.3 kB
Version.hs.in 246 Bytes

Latest revisions

# Date Author Comment
1264bd58 01/07/2014 10:14 am Klaus Aehlig

Fix sign in drain_flag request

The drain flag is set, if the queue is not open.

Signed-off-by: Klaus Aehlig <>
Reviewed-by: Guido Trotter <>
e97cce9f 12/20/2013 03:49 pm Klaus Aehlig

Reinstantiate inotify after a lost file

When watching a file, reinstantiate the inotify if notified
of an event that removes the watch. Such events are likely
to happen, as our usual way to "modify" a file is to atomically
replace it by another one.

Signed-off-by: Klaus Aehlig <>...
2f575937 12/20/2013 03:49 pm Klaus Aehlig

Improve debug-logging for watch file

Also log, at debug level only, when a change of a watched
file was observed, but the change did not result in any
change of derived value.

Signed-off-by: Klaus Aehlig <>
Reviewed-by: Helga Velroyen <>
13b05c27 12/20/2013 03:49 pm Klaus Aehlig

Improve debugging by logging inotify events

At debug level, not only log that an inotify triggered,
but also log the actual event.

Signed-off-by: Klaus Aehlig <>
Reviewed-by: Helga Velroyen <>
a6c43c02 12/20/2013 03:15 pm Helga Velroyen

Verify client certificates

This patch adds a step to 'gnt-cluster verify' to verify
the existence and validity of the nodes' client
certificates. Since this is a crucial point of the
security concept, the verification is very detailed with
expressive error messages and well tested by unit tests....
b3cc1646 12/20/2013 03:15 pm Helga Velroyen

Verify incoming RPCs against candidate map

From this patch on, incoming RPC calls are checked against
the map of valid master candidate certificates. If no map
is present, the cluster is assumed to be in
bootstrap/upgrade mode and compares the incoming call...
d722af8b 12/20/2013 03:15 pm Helga Velroyen

Extend RPC call to create SSL certificates

So far the RPC call 'node_crypto_tokens' did only retrieve
the certificate digest of an existing certificate. This
call is now enhanced to also create a new certificate and
return the respective digest. This will be used in various...
1059337d 12/20/2013 03:15 pm Helga Velroyen

Store candidate certificates in ssconf

This patch enables Ganeti to store the candidate
certificate map in ssconf. A utility function to
read it is provided as well.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
3bcf2140 12/20/2013 03:15 pm Helga Velroyen

Add candiate certificate map to configuration

At the end of this patch series, incoming RPC calls are
legitimized against a map of master candidate nodes'
SSL certificate digests. This patch adds the map itself
to the cluster's configuration.

Signed-off-by: Helga Velroyen <>...
b544a3c2 12/20/2013 03:15 pm Helga Velroyen

Retrieve a node's certificate digest

In various cluster operations, the master node needs to
retrieve the digest of a node's SSL certificate. For this
purpose, we add an RPC call to retrieve the digest. The
function is designed in a general way to make it possible...

View revisions

Also available in: Atom