Statistics
| Branch: | Tag: | Revision:

root / lib @ 28756f80

Name Size
  build
  client
  cmdlib
  confd
  http
  hypervisor
  impexpd
  masterd
  rapi
  rpc
  server
  storage
  tools
  utils
  watcher
__init__.py 1.2 kB
_constants.py.in 285 Bytes
asyncnotifier.py 6.1 kB
backend.py 144.7 kB
bootstrap.py 42.5 kB
cli.py 137.7 kB
compat.py 4.3 kB
config.py 97.4 kB
constants.py 2.9 kB
daemon.py 27.6 kB
errors.py 10.9 kB
hooksmaster.py 9.6 kB
ht.py 17.1 kB
jqueue.py 75.4 kB
jstore.py 6.1 kB
locking.py 60.9 kB
luxi.py 7.2 kB
mcpu.py 18.3 kB
netutils.py 19.7 kB
network.py 7.7 kB
objects.py 65.7 kB
opcodes.py.in_after 391 Bytes
opcodes.py.in_before 6.9 kB
opcodes_base.py 7.7 kB
outils.py 4.3 kB
ovf.py 66 kB
pathutils.py 6.2 kB
qlang.py 9.5 kB
query.py 86.3 kB
rpc_defs.py 26 kB
runtime.py 8.4 kB
serializer.py 4.5 kB
ssconf.py 13.5 kB
ssh.py 10.7 kB
uidpool.py 11.7 kB
vcluster.py 7.4 kB
workerpool.py 18.3 kB

Latest revisions

# Date Author Comment
28756f80 12/20/2013 03:15 pm Helga Velroyen

Handle promoting/demoting nodes wrt to client certificates

This patch makes Ganeti correctly handle the client
certificates when nodes get promoted to master candidates
or demoted to normal nodes.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
d722af8b 12/20/2013 03:15 pm Helga Velroyen

Extend RPC call to create SSL certificates

So far the RPC call 'node_crypto_tokens' did only retrieve
the certificate digest of an existing certificate. This
call is now enhanced to also create a new certificate and
return the respective digest. This will be used in various...
60cc531d 12/20/2013 03:15 pm Helga Velroyen

Create client SSL certificates on cluster init

This patch makes Ganeti create a client SSL certificate for
the master node on cluster initialization. Note that some of
the code in this patch is later moved into an LU to serve
requirements for crypto renewal and updates, but for this...
1059337d 12/20/2013 03:15 pm Helga Velroyen

Store candidate certificates in ssconf

This patch enables Ganeti to store the candidate
certificate map in ssconf. A utility function to
read it is provided as well.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
840ad2ab 12/20/2013 03:15 pm Helga Velroyen

Handle client certificates on node add/remove

This patch adds the certificate of a newly added or
readded master candidate node to the map of master candidate
certificates. It removes a master candidate node's certificate
digest from the candidate certificate map if the node is...
5b6f9e35 12/20/2013 03:15 pm Helga Velroyen

Add certificate for master node

On cluster initialization, the master node's
SSL certificate digest is added to the list of master
candidate certificates.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
3bcf2140 12/20/2013 03:15 pm Helga Velroyen

Add candiate certificate map to configuration

At the end of this patch series, incoming RPC calls are
legitimized against a map of master candidate nodes'
SSL certificate digests. This patch adds the map itself
to the cluster's configuration.

Signed-off-by: Helga Velroyen <>...
b544a3c2 12/20/2013 03:15 pm Helga Velroyen

Retrieve a node's certificate digest

In various cluster operations, the master node needs to
retrieve the digest of a node's SSL certificate. For this
purpose, we add an RPC call to retrieve the digest. The
function is designed in a general way to make it possible...
3338a9ce 12/20/2013 03:15 pm Helga Velroyen

Utility functions to manipulate the candidate map

This patch adds a couple of utility functions to manipulate
the map of master candidate SSL certificate digests.

Signed-off-by: Helga Velroyen <>
Reviewed-by: Hrvoje Ribicic <>
f3ac6f36 12/19/2013 01:59 pm Klaus Aehlig

Merge branch 'stable-2.10' into master

  • stable-2.10
    Version bump for 2.10.0~rc1
    Update NEWS for 2.10.0 rc1 release
    Fix pylint 0.26.0/Python 2.7 warning
    Update INSTALL and devnotes for 2.10 release
  • stable-2.9
    Bump revision for 2.9.2
    Update NEWS for 2.9.2 release...

View revisions

Also available in: Atom