1. 10 Jul, 2014 1 commit
  2. 10 Jun, 2014 1 commit
  3. 30 May, 2014 1 commit
  4. 16 May, 2014 1 commit
  5. 27 Feb, 2014 1 commit
  6. 14 Feb, 2014 1 commit
    • Helga Velroyen's avatar
      Use node UUID as client certificate serial number · ab4b1cf2
      Helga Velroyen authored
      
      
      It turns out, that some implementations of OpenSSL are more
      pedantic in checking the certficates than others. In this
      particular case, the SSL connection could not be
      established when the serial number of the certificates
      was not unique.
      
      To avoid this problem, this patch extends Ganeti's X509
      infrastructure to set the certificate's serial
      number. In case of client certificates, we now use the
      node's UUID as serial number, because the UUIDs are
      assumed to be unique in a cluster. This is however still
      not complying to how SSL was designed to be used, but at
      least it is a lot better than setting every serial number
      to 1, which was used before and is still used for other
      certificates than the client certificate.
      Signed-off-by: default avatarHelga Velroyen <helgav@google.com>
      Reviewed-by: default avatarKlaus Aehlig <aehlig@google.com>
      ab4b1cf2
  7. 12 Feb, 2014 1 commit
  8. 20 Jan, 2014 1 commit
  9. 16 Jan, 2014 2 commits
  10. 13 Jan, 2014 2 commits
  11. 07 Jan, 2014 1 commit
  12. 20 Dec, 2013 4 commits
  13. 17 Dec, 2013 5 commits
  14. 02 Dec, 2013 1 commit
  15. 28 Nov, 2013 1 commit
  16. 26 Nov, 2013 6 commits
  17. 14 Nov, 2013 1 commit
    • Thomas Thrainer's avatar
      Don't allow optional node parameters · 07e68848
      Thomas Thrainer authored
      
      
      Ganeti does not support optional fields in parameters
      (hypervisor-params, disk-params, etc.). OpenVSwitch related node
      parameters were the exception to this rule, which caused numerous
      problems related to import/export and (de-)serialization.
      
      The reason for making those parameters optional in the first place was to
      disallow them when OpenVSwitch is not used. This was not consistent with
      other parts of Ganeti, where we allow parameters to be set even though they
      are not actively used.
      
      This patch makes all node parameters mandatory and provides sensible
      defaults for them. Checks which make sure that certain parameters are
      not set in some cases were removed, and the tests adapted. Also, the
      inheritance logic from cluster -> node group -> node was implemented, as
      it was missing previously.
      Signed-off-by: default avatarThomas Thrainer <thomasth@google.com>
      Reviewed-by: default avatarHrvoje Ribicic <riba@google.com>
      07e68848
  18. 08 Nov, 2013 2 commits
  19. 29 Aug, 2013 2 commits
  20. 05 Mar, 2013 1 commit
  21. 24 Dec, 2012 1 commit
  22. 24 Aug, 2012 1 commit
  23. 24 May, 2011 1 commit
    • Iustin Pop's avatar
      Implement conversion of Python constants to Haskell · d99d1e36
      Iustin Pop authored
      
      
      With the merge of the repositories, we can now auto-generate the code
      for Haskell constants from the Python code.
      
      Currently this only handles the basic types (strings and
      integers). Handling containers such as lists and dictionaries is only
      possible if we would use a parser such that we recognise the element
      names. We could extend the convert-constants script if that becomes
      necessary, right now I'm looking at just the simple constants such as
      Iallocator modes, instance states, etc.
      Signed-off-by: default avatarIustin Pop <iustin@google.com>
      Reviewed-by: default avatarMichael Hanselmann <hansmi@google.com>
      d99d1e36