root / man / ganeti-rapi.sgml @ 7a8da378
History | View | Annotate | Download (3.8 kB)
1 | 320d986d | Iustin Pop | <!doctype refentry PUBLIC "-//OASIS//DTD DocBook V4.1//EN" [ |
---|---|---|---|
2 | 320d986d | Iustin Pop | |
3 | 320d986d | Iustin Pop | <!-- Fill in your name for FIRSTNAME and SURNAME. --> |
4 | 320d986d | Iustin Pop | <!-- Please adjust the date whenever revising the manpage. --> |
5 | 320d986d | Iustin Pop | <!ENTITY dhdate "<date>February 11, 2009</date>"> |
6 | 320d986d | Iustin Pop | <!-- SECTION should be 1-8, maybe w/ subsection other parameters are |
7 | 320d986d | Iustin Pop | allowed: see man(7), man(1). --> |
8 | 320d986d | Iustin Pop | <!ENTITY dhsection "<manvolnum>8</manvolnum>"> |
9 | 320d986d | Iustin Pop | <!ENTITY dhucpackage "<refentrytitle>ganeti-rapi</refentrytitle>"> |
10 | 320d986d | Iustin Pop | <!ENTITY dhpackage "ganeti-rapi"> |
11 | 320d986d | Iustin Pop | |
12 | 320d986d | Iustin Pop | <!ENTITY debian "<productname>Debian</productname>"> |
13 | 320d986d | Iustin Pop | <!ENTITY gnu "<acronym>GNU</acronym>"> |
14 | 320d986d | Iustin Pop | <!ENTITY gpl "&gnu; <acronym>GPL</acronym>"> |
15 | 320d986d | Iustin Pop | <!ENTITY footer SYSTEM "footer.sgml"> |
16 | 320d986d | Iustin Pop | ]> |
17 | 320d986d | Iustin Pop | |
18 | 320d986d | Iustin Pop | <refentry> |
19 | 320d986d | Iustin Pop | <refentryinfo> |
20 | 320d986d | Iustin Pop | <copyright> |
21 | 320d986d | Iustin Pop | <year>2008</year> |
22 | 320d986d | Iustin Pop | <year>2009</year> |
23 | 320d986d | Iustin Pop | <holder>Google Inc.</holder> |
24 | 320d986d | Iustin Pop | </copyright> |
25 | 320d986d | Iustin Pop | &dhdate; |
26 | 320d986d | Iustin Pop | </refentryinfo> |
27 | 320d986d | Iustin Pop | <refmeta> |
28 | 320d986d | Iustin Pop | &dhucpackage; |
29 | 320d986d | Iustin Pop | |
30 | 320d986d | Iustin Pop | &dhsection; |
31 | 320d986d | Iustin Pop | <refmiscinfo>ganeti 2.0</refmiscinfo> |
32 | 320d986d | Iustin Pop | </refmeta> |
33 | 320d986d | Iustin Pop | <refnamediv> |
34 | 320d986d | Iustin Pop | <refname>&dhpackage;</refname> |
35 | 320d986d | Iustin Pop | |
36 | 320d986d | Iustin Pop | <refpurpose>ganeti remote API daemon</refpurpose> |
37 | 320d986d | Iustin Pop | </refnamediv> |
38 | 320d986d | Iustin Pop | <refsynopsisdiv> |
39 | 320d986d | Iustin Pop | <cmdsynopsis> |
40 | 320d986d | Iustin Pop | <command>&dhpackage; </command> |
41 | 320d986d | Iustin Pop | <arg>-d</arg> |
42 | 320d986d | Iustin Pop | <arg>-f</arg> |
43 | 320d986d | Iustin Pop | <arg>--no-ssl</arg> |
44 | 320d986d | Iustin Pop | <arg>-K <replaceable>SSL_KEY_FILE</replaceable></arg> |
45 | 320d986d | Iustin Pop | <arg>-C <replaceable>SSL_CERT_FILE</replaceable></arg> |
46 | 320d986d | Iustin Pop | |
47 | 320d986d | Iustin Pop | </cmdsynopsis> |
48 | 320d986d | Iustin Pop | </refsynopsisdiv> |
49 | 6e99c5a0 | Iustin Pop | |
50 | 320d986d | Iustin Pop | <refsect1> |
51 | 320d986d | Iustin Pop | <title>DESCRIPTION</title> |
52 | 320d986d | Iustin Pop | |
53 | 320d986d | Iustin Pop | <para> |
54 | 320d986d | Iustin Pop | <command>&dhpackage;</command> is the daemon providing a remote |
55 | 320d986d | Iustin Pop | API for Ganeti clusters. |
56 | 320d986d | Iustin Pop | </para> |
57 | 320d986d | Iustin Pop | |
58 | 320d986d | Iustin Pop | <para> |
59 | 320d986d | Iustin Pop | It is automatically started on the master node, and by default |
60 | 320d986d | Iustin Pop | it uses SSL encryption. This can be disabled by passing the |
61 | 320d986d | Iustin Pop | <option>--no-ssl</option> option, or alternatively the |
62 | 320d986d | Iustin Pop | certificate used can be changed via the <option>-C</option> |
63 | 320d986d | Iustin Pop | option and the key via the <option>-K</option> option. |
64 | 320d986d | Iustin Pop | </para> |
65 | 320d986d | Iustin Pop | |
66 | 320d986d | Iustin Pop | <para> |
67 | 8c96d01f | Guido Trotter | The daemon will listen to the "ganeti-rapi" tcp port, as listed in the |
68 | 8c96d01f | Guido Trotter | system services database, or to port 5080 by default. |
69 | 320d986d | Iustin Pop | </para> |
70 | 320d986d | Iustin Pop | |
71 | 320d986d | Iustin Pop | <para> |
72 | 320d986d | Iustin Pop | See the <emphasis>Ganeti remote API</emphasis> documentation for |
73 | 320d986d | Iustin Pop | further information. |
74 | 320d986d | Iustin Pop | </para> |
75 | 320d986d | Iustin Pop | |
76 | 320d986d | Iustin Pop | <para> |
77 | 320d986d | Iustin Pop | Requests are logged to |
78 | 320d986d | Iustin Pop | <filename>@LOCALSTATEDIR@/log/ganeti/rapi-daemon.log</filename>, |
79 | 320d986d | Iustin Pop | in the same format as for the node and master daemon. |
80 | 320d986d | Iustin Pop | </para> |
81 | 320d986d | Iustin Pop | |
82 | 320d986d | Iustin Pop | </refsect1> |
83 | 320d986d | Iustin Pop | |
84 | 6e99c5a0 | Iustin Pop | <refsect1> |
85 | 6e99c5a0 | Iustin Pop | <title>ACCESS CONTROLS</title> |
86 | 6e99c5a0 | Iustin Pop | |
87 | 6e99c5a0 | Iustin Pop | <para> |
88 | 6e99c5a0 | Iustin Pop | All query operations are allowed without authentication. Only |
89 | 6e99c5a0 | Iustin Pop | the modification operations require authentication, in the form |
90 | 6e99c5a0 | Iustin Pop | of basic authentication. |
91 | 6e99c5a0 | Iustin Pop | </para> |
92 | 6e99c5a0 | Iustin Pop | |
93 | 6e99c5a0 | Iustin Pop | <para> |
94 | 6e99c5a0 | Iustin Pop | The users and their rights are defined in a file named |
95 | 6e99c5a0 | Iustin Pop | <filename>rapi_users</filename>, located in the <filename |
96 | 6e99c5a0 | Iustin Pop | class="directory">@LOCALSTATEDIR@/ganeti</filename> |
97 | 6e99c5a0 | Iustin Pop | directory. The users should be listed one per line, in the |
98 | 6e99c5a0 | Iustin Pop | following format: |
99 | 6e99c5a0 | Iustin Pop | </para> |
100 | 6e99c5a0 | Iustin Pop | |
101 | 6e99c5a0 | Iustin Pop | <screen>username password options</screen> |
102 | 6e99c5a0 | Iustin Pop | |
103 | 6e99c5a0 | Iustin Pop | <para> |
104 | 6e99c5a0 | Iustin Pop | Currently the <replaceable>options</replaceable> field should |
105 | 6e99c5a0 | Iustin Pop | equal the string <emphasis>write</emphasis> in order to actually |
106 | 6e99c5a0 | Iustin Pop | give write permission for the given users. Example: |
107 | 6e99c5a0 | Iustin Pop | </para> |
108 | 6e99c5a0 | Iustin Pop | <screen>rclient secret write |
109 | 6e99c5a0 | Iustin Pop | guest tespw |
110 | 6e99c5a0 | Iustin Pop | </screen> |
111 | 6e99c5a0 | Iustin Pop | <para>The first user (<userinput>rclient</userinput>) will have |
112 | 6e99c5a0 | Iustin Pop | read-write rights, whereas the second user does only have read |
113 | 6e99c5a0 | Iustin Pop | (query) rights, and as such is no different than not using |
114 | 6e99c5a0 | Iustin Pop | authentication at all.</para> |
115 | 6e99c5a0 | Iustin Pop | </refsect1> |
116 | 320d986d | Iustin Pop | &footer; |
117 | 320d986d | Iustin Pop | |
118 | 320d986d | Iustin Pop | </refentry> |
119 | 320d986d | Iustin Pop | |
120 | 320d986d | Iustin Pop | <!-- Keep this comment at the end of the file |
121 | 320d986d | Iustin Pop | Local variables: |
122 | 320d986d | Iustin Pop | mode: sgml |
123 | 320d986d | Iustin Pop | sgml-omittag:t |
124 | 320d986d | Iustin Pop | sgml-shorttag:t |
125 | 320d986d | Iustin Pop | sgml-minimize-attributes:nil |
126 | 320d986d | Iustin Pop | sgml-always-quote-attributes:t |
127 | 320d986d | Iustin Pop | sgml-indent-step:2 |
128 | 320d986d | Iustin Pop | sgml-indent-data:t |
129 | 320d986d | Iustin Pop | sgml-parent-document:nil |
130 | 320d986d | Iustin Pop | sgml-default-dtd-file:nil |
131 | 320d986d | Iustin Pop | sgml-exposed-tags:nil |
132 | 320d986d | Iustin Pop | sgml-local-catalogs:nil |
133 | 320d986d | Iustin Pop | sgml-local-ecat-files:nil |
134 | 320d986d | Iustin Pop | End: |
135 | 320d986d | Iustin Pop | --> |