History | View | Annotate | Download (12.4 kB)
Revert "Disabling client certificate usage"
This reverts commit 45f75526b848, which was introduced totemporarily disable the implementation of SSL clientcertificates. As this patch series fixes the reason forthe disabling, we are rolling back the patch....
Disabling client certificate usage
This patch temporarily disables the usage of the clientSSL certificates. The handling of RPC connections had aconceptional flaw, because the certificates lack a propersignature. For this, Ganeti needs to implement a CA,...
Document automatic actions taken at upgrade
When upgrading from any version below 2.11 to 2.11 or higher,Ganeti will generate new RPC client certificates when upgradingwith ``gnt-cluster upgrade``. Document this behavior in theUPGRADE notes to avoid user surprises....
Document 2.11 to 2.10 specific downgrade tasks
While the recommended way of downgrading from version 2.11 to 2.10is ``gnt-cluster upgrade --to 2.10``, manual downgrade is supported.So, the version-specific steps need to be documented in the UPGRADEnotes....
Document support for automatic downgrades
The recommended way of downgrading a cluster from 2.11 onwardsis to use the ``gnt-cluster upgrade`` command. Document this inthe section on downgrades.
Signed-off-by: Klaus Aehlig <aehlig@google.com>Reviewed-by: Helga Velroyen <helgav@google.com>
Update UPGRADE nodes
Adds to the upgrade nodes that a renewal of the nodecertificates is necessary.
Signed-off-by: Helga Velroyen <helgav@google.com>Reviewed-by: Hrvoje Ribicic <riba@google.com>
Mention gnt-cluster upgrade in UPGRADE
Ganeti 2.11 is the first version of Ganeti reachable (from 2.10) withgnt-cluster upgrade. Hence suggest this method in the UPGRADE notes.
Update the upgrade procedure
Now that users-setup asks for confirmation, explain in theprocedure how asking for this confirmation can be skipped.This skipping is particularly important for users followingthe recommendation of using the distributed shell (dsh)....
Clarify that cmdlib/ must be removed downgrading
Downgrading from 2.8 to a previous version will fail if the new cmdlib/directory is not removed.
Signed-off-by: Michele Tartara <mtartara@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Fix formatting error in the UPGRADE document
An item of the enumerated list was not rendered correctly.
Merge branch 'stable-2.7' into stable-2.8
Conflicts:...
Fix wrong numbering in UPGRADE documentation
Signed-off-by: Michele Tartara <mtartara@google.com>Reviewed-by: Klaus Aehlig <aehlig@google.com>
Add confd user to masterd group
The server.pem file is 0440 (materd_uid, masterd_gid) and cannot beaccessed by confd.
This patch contains a workaround for 2.8.0~beta1 (adding conf to themasterd group in the user setup tool, and remembering the users to...
Merge stable-2.7 into stable-2.8
Conflicts: INSTALL NEWS configure.ac src/Ganeti/Query/Group.hs test/hs/Test/Ganeti/Objects.hs test/hs/Test/Ganeti/Query/Query.hs
Signed-off-by: Michele Tartara <mtartara@google.com>Reviewed-by: Helga Velroyen <helgav@google.com>
Mention file-storage-paths in UPGRADE
It was in NEWS, but not mentioned at all in the upgrade notes.
Signed-off-by: Guido Trotter <ultrotter@google.com>Reviewed-by: Klaus Aehlig <aehlig@google.com>
Merge branch 'devel-2.7'
Fix job queue directory permission problems
If split users are used, the queue directory could only be accessedby masterd, but also confd needs to be able to read it, e.g. when itis queried as part of "gnt-job list"
This commit fixes the permissions in such a way to allow proper access rights....
Document procedure to downgrade a cluster
This is based on the --donwgrade option of cfgupgrade, first introduced in1709435e.
Signed-off-by: Bernardo Dal Seno <bdalseno@google.com>Reviewed-by: Guido Trotter <ultrotter@google.com>
Fix upgrade procedure in UPGRADE
The watcher should be disabled while upgrading.
Convert two more 'sh' highlight styles to 'shell-example'
This is straightforward; only one shell example remained, but as weprocess the man pages via pandoc and not sphinx, it's not actuallyused, we leave it as such for now.
Signed-off-by: Iustin Pop <iustin@google.com>...
Update manpages and other documents with editor settings
No rewrapping is done in this patch, just updates to the settings.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: René Nussbaumer <rn@google.com>
Move doc/upgrade.rst to UPGRADE, copy at build-time
This will allow distributions to install the file as text documentation.
Signed-off-by: Michael Hanselmann <hansmi@google.com>Reviewed-by: Iustin Pop <iustin@google.com>