History | View | Annotate | Download (27.8 kB)
Fixing formatting of design-node-security
Turns out, rst wants to have a blank line beforeenumerations. Also rearranging some paragraph to make thelines align better.
Signed-off-by: Helga Velroyen <helgav@google.com>Reviewed-by: Hrvoje Ribicic <riba@google.com>
Detailing SSH part of 'desing-node-security'
This patch elaborates the node security design wrt to SSHkey handling to make sure it is feasible before startingthe implementation.In this updated design the first and more simple proposalof simply removing the private root key from normal nodes...
Update design doc wrt to improved SSL design
This patch updates the design document of Ganeti's nodesecurity to make it consistent with the implementationand to extend it with a couple of suggestions to improvethe SSL security even more.
Signed-off-by: Helga Velroyen <helgav@google.com>...
Update design doc to match implementation
This patch contains some minor changes in the design docto make sure the details match the implementation.
Design: Improvements of Node Security
This is a design doc addressing issue 377. Objective isto reduce the number of nodes that are able to establishssh and RPC connections to other nodes. Limiting thisset of nodes to the master candidates is desired to...