Revision c9f79949
| b/lib/pathutils.py | ||
|---|---|---|
| 74 | 74 |
SSCONF_LOCK_FILE = LOCK_DIR + "/ganeti-ssconf.lock" |
| 75 | 75 |
|
| 76 | 76 |
CLUSTER_CONF_FILE = DATA_DIR + "/config.data" |
| 77 |
NODED_CERT_FILE = DATA_DIR + "/server.pem" |
|
| 78 | 77 |
RAPI_CERT_FILE = DATA_DIR + "/rapi.pem" |
| 79 | 78 |
CONFD_HMAC_KEY = DATA_DIR + "/hmac.key" |
| 80 | 79 |
SPICE_CERT_FILE = DATA_DIR + "/spice.pem" |
| ... | ... | |
| 90 | 89 |
FILE_STORAGE_PATHS_FILE = CONF_DIR + "/file-storage-paths" |
| 91 | 90 |
RESTRICTED_COMMANDS_DIR = CONF_DIR + "/restricted-commands" |
| 92 | 91 |
|
| 92 |
#: Node daemon certificate path |
|
| 93 |
NODED_CERT_FILE = DATA_DIR + "/server.pem" |
|
| 94 |
|
|
| 95 |
#: Node daemon certificate file permissions |
|
| 96 |
NODED_CERT_MODE = 0440 |
|
| 97 |
|
|
| 93 | 98 |
#: Locked in exclusive mode while noded verifies a remote command |
| 94 | 99 |
RESTRICTED_COMMANDS_LOCK_FILE = LOCK_DIR + "/ganeti-restricted-commands.lock" |
| 95 | 100 |
|
| b/lib/tools/ensure_dirs.py | ||
|---|---|---|
| 144 | 144 |
getent.masterd_gid, False), |
| 145 | 145 |
(pathutils.SPICE_CACERT_FILE, FILE, 0440, getent.noded_uid, |
| 146 | 146 |
getent.masterd_gid, False), |
| 147 |
(pathutils.NODED_CERT_FILE, FILE, 0440, getent.masterd_uid,
|
|
| 148 |
getent.masterd_gid, False), |
|
| 147 |
(pathutils.NODED_CERT_FILE, FILE, pathutils.NODED_CERT_MODE,
|
|
| 148 |
getent.masterd_uid, getent.masterd_gid, False),
|
|
| 149 | 149 |
] |
| 150 | 150 |
|
| 151 | 151 |
ss = ssconf.SimpleStore() |
Also available in: Unified diff