Synnefo » snf-ganeti

def _RenewCrypto(new_cluster_cert, new_rapi_cert, rapi_cert_filename,

  """Renews cluster certificates, keys and secrets.

  @type new_cluster_cert: bool

  @param new_rapi_cert: Whether to generate a new RAPI certificate

  @type rapi_cert_filename: string

  @param rapi_cert_filename: Path to file containing new RAPI certificate

  @type force: bool

  @param force: Whether to ask user for confirmation

  """

  if new_rapi_cert and rapi_cert_filename:

    ToStderr("Only one of the --new-rapi-certficate and --rapi-certificate"

  def _RenewCryptoInner(ctx):

    ctx.feedback_fn("Updating certificates and keys")

    bootstrap.GenerateClusterCrypto(new_cluster_cert, new_rapi_cert,

                                    rapi_cert_pem=rapi_cert_pem)

    files_to_copy = []

    if new_rapi_cert or rapi_cert_pem:

      files_to_copy.append(constants.RAPI_CERT_FILE)

    if files_to_copy:

      for node_name in ctx.nonmaster_nodes:

  return _RenewCrypto(opts.new_cluster_cert,

                      opts.new_rapi_cert,

                      opts.rapi_cert,

                      opts.force)

    "Alters the parameters of the cluster"),

  "renew-crypto": (

    RenewCrypto, ARGS_NONE,

    "[opts...]",

    "Renews cluster certificates, keys and secrets"),

  }