Synnefo » snf-ganeti

def RemoveNodeCertFromCandidateCerts(node_uuid, cluster):

  """Removes the node's certificate from the candidate certificates list.

  @type node_uuid: string

  @param node_uuid: the node's UUID

  @type cluster: C{objects.Cluster}

  @param cluster: the cluster's configuration

  """

  utils.RemoveNodeFromCandidateCerts(node_uuid, cluster.candidate_certs)

def CreateNewClientCert(self, node_uuid, filename=None):

  """Creates a new client SSL certificate for the node.

  @type node_uuid: string

  @param node_uuid: the node's UUID

  @type filename: string

  @param filename: the certificate's filename

  @rtype: string

  @return: the digest of the newly created certificate

  """

  options = {}

  if filename:

    options[constants.CRYPTO_OPTION_CERT_FILE] = filename

  result = self.rpc.call_node_crypto_tokens(

             node_uuid,

             [(constants.CRYPTO_TYPE_SSL_DIGEST,

               constants.CRYPTO_ACTION_CREATE,

               options)])

  result.Raise("Could not create the node's (uuid %s) SSL client"

               " certificate." % node_uuid)

  ((crypto_type, new_digest), ) = result.payload

  assert crypto_type == constants.CRYPTO_TYPE_SSL_DIGEST

  return new_digest

  FindFaultyInstanceDisks, CheckStorageTypeEnabled, CreateNewClientCert, \

  AddNodeCertToCandidateCerts, RemoveNodeCertFromCandidateCerts

      # We create a new certificate even if the node is readded

      digest = CreateNewClientCert(self, self.new_node.uuid)

      utils.AddNodeToCandidateCerts(self.new_node.uuid, digest,

                                    cluster.candidate_certs)

      cluster = self.cfg.GetClusterInfo()

      # if node gets promoted, grant RPC priviledges

      if self.new_role == self._ROLE_CANDIDATE:

        AddNodeCertToCandidateCerts(self, node.uuid, cluster)

      # if node is demoted, revoke RPC priviledges

      if self.old_role == self._ROLE_CANDIDATE:

        RemoveNodeCertFromCandidateCerts(node.uuid, cluster)