Jarrod Johnson
0a3936164e
Fix role management for users and groups
2020-08-05 15:02:30 -04:00
Jarrod Johnson
c8cda426be
Fix crossed wires between user and usergroup
...
The requests were not being routed correctly
2020-08-05 12:57:35 -04:00
Jarrod Johnson
585988b22a
Add firmwaredhcp method
...
In a case where static is
desired for the OS, but
PXE or HTTP boot will
receive an IP address from
a DHCP server, offer firmwaredhcp.
This tells confluent to refrain from offering an IP during firmware, but still telling the OS to use static.
2020-08-03 11:42:27 -04:00
Jarrod Johnson
e93c3241ed
Provide for more hostnames
...
This permits ssh infrastructure
to have multihomed nodes
handled more effeectively.
2020-07-29 13:08:03 -04:00
Jarrod Johnson
fd46bae24f
Fix for removing groups providing multiple values
...
I don't know how this was missed for so long,
but removing a group providing multiple values would produce an error and fail.
2020-07-17 11:48:49 -04:00
Jarrod Johnson
2bfbfeb4d3
Add ntp to deploycfg data
2020-07-09 11:35:11 -04:00
Jarrod Johnson
68c4652662
Fix per-collective globals
...
set_global is explicitly not
collective enabled, however
collective was causing partial
propagation.
Fix by removing the global carry over and having
commit_clear restore the non-key globals.
2020-07-09 09:10:24 -04:00
Jarrod Johnson
78e5d343e7
Implement a 'staged' phase of profile
...
This allows a limbo where remote deployment is blocked
but final deployment is not yet flagged.
2020-07-01 14:01:28 -04:00
Jarrod Johnson
22085e38f5
Change bound to 'tpm2'.
...
This is a bit more logical and flexible for the future.
2020-07-01 13:33:59 -04:00
Jarrod Johnson
f505b3ad16
Fix grub hash bytes
...
In python3, need to coerce the strings
to str or else end up with invalid grub password.
2020-06-04 10:27:55 -04:00
Jarrod Johnson
f86429c83c
Fix credserver
...
The grubhash should only fill in if there is a value to fill in.
2020-06-02 16:47:50 -04:00
Jarrod Johnson
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
Jarrod Johnson
9f4c02dc83
Fix grub hash storage of password
2020-06-02 12:47:47 -04:00
Jarrod Johnson
033903f712
Fix typo in configmanager
2020-06-02 11:38:03 -04:00
Jarrod Johnson
cf9f4a9691
Add grub password to attributes
...
This permits opting into using
a password to block editing
of grub configuration.
2020-06-02 10:59:30 -04:00
Jarrod Johnson
e696566b42
Add dns domain to deployment
...
This permits the deployment profiles
to pull in specified DNS domain.
2020-05-19 15:07:10 -04:00
Jarrod Johnson
eec7236110
Rename dns server attribute
2020-05-19 14:45:06 -04:00
Jarrod Johnson
7dcad26002
Add hook for registering install completion
...
This will allow watching the
profile for changes to know
when install is utterly complete.
2020-05-13 16:29:10 -04:00
Jarrod Johnson
ee2f80b5d2
Merge branch 'master' into osdeploy
2020-05-08 14:27:25 -04:00
Jarrod Johnson
51c09d844f
Fix broken expressions
...
Fix mistake in the {} password fix.
2020-05-08 13:29:33 -04:00
Jarrod Johnson
2c4f8dfceb
Fix backup/restore with python3
...
backup/restore with password
was having problems with python3
2020-05-07 16:27:00 -04:00
Jarrod Johnson
d90e87e153
Fix backup/restore with python3
...
backup/restore with password
was having problems with python3
2020-05-07 16:22:56 -04:00
Jarrod Johnson
36911c0d2e
Merge branch 'master' into osdeploy
2020-04-22 09:01:02 -04:00
Jarrod Johnson
5232b7c9c4
Fix passwords with {} in them
...
The input handler erroneously
tried to make an expression out
of values that did not support
expressions.
2020-04-22 08:58:38 -04:00
Jarrod Johnson
931c7f25d1
Change apikey to crypted
...
Since it will be crypted, makes sense
for it to be presented same way as rootpassword.
2020-04-21 08:24:01 -04:00
Jarrod Johnson
149e41c33c
Add DNS information
...
Enable setting DNS servers in
the deployment.
2020-04-20 14:27:14 -04:00
Jarrod Johnson
198b26245b
Move hashing before collective
...
This results in consistent hash
using the initial random, rather
than equivalent, but odd looking
crypted hashes across collective.
2020-04-16 20:51:14 -04:00
Jarrod Johnson
4fb7924015
Fix invalid salts
...
base64 standard alphabet doesn't
quite map to salt alphabet. Use
. and / instead.
2020-04-16 20:11:17 -04:00
Jarrod Johnson
09700626b5
Add attribute to store root password
...
We want a non-recoverable form,
so hard code it to force it that way.
2020-04-15 16:18:39 -04:00
Jarrod Johnson
2c1ddabf32
Rename api.* attributes
...
Gather them into the deployment
category.
2020-04-15 11:50:10 -04:00
Jarrod Johnson
8e8e17a34e
Merge branch 'master' into osdeploy
2020-04-02 10:26:28 -04:00
Jarrod Johnson
a0684520d8
Add documentation for some parameter default
2020-04-02 10:25:57 -04:00
Jarrod Johnson
a1bb603570
Fix multinet support and prefix
2020-03-24 10:31:19 -04:00
Jarrod Johnson
0f67f5c382
Draft attempt at refactoring PXE
...
The plan is to have 'discovery'
data only on DISCOVER, but
still parse and be able to react to
REQUEST packets.
Additionally add the attributes
to control deployment state and
permissible protocols.
2020-03-11 15:22:45 -04:00
Jarrod Johnson
f955086cc3
Create an alternative api.armed behavior
...
Move from a clock based expiration to a simpler 'once' versus
'continous' model. 'once' is intended to be used generally, 'continuous'
for stateless without benefit of TPM. The goal would be to use TPM
to seal a key to avoid continuous.
2020-02-27 13:33:05 -05:00
Jarrod Johnson
24874bb4be
Merge branch 'master' into nodesearch
2020-02-20 20:37:23 -05:00
Jarrod Johnson
201985dd0e
Fix missing argument to rpc_set_user
...
Requests were unable to traverse
a collective.
2020-02-05 14:55:51 -05:00
Jarrod Johnson
1aee19997a
Carry errors across msgpack
...
Messages that were formerly carried
as pickled exceptions are now sent
as generic strings over msgpack.
2020-02-04 10:16:48 -05:00
Jarrod Johnson
4be4100014
Fix configmanager msgpack
...
msgpack method had some regressions. For one, python2 strings
became bytes on mixed collective, fix by using raw=False on the
receiver.
Additionally, del_nodes tends to use sets, and that's not viable for
msgpack. Guard against that.
2020-01-29 09:24:57 -05:00
Jarrod Johnson
445950d02a
Roll back library level force of role
...
Doing collective and config restore breaks. The API
will still prevent implicit role assumption.
2020-01-28 10:05:04 -05:00
Jarrod Johnson
cf72cf2d8c
Require role explicitly on user/group creation
...
Rather than default to administrator, require
the user to explicitly set the role to administrator.
2020-01-27 16:12:03 -05:00
Jarrod Johnson
0652a7321b
Apply whitelist to rpc functions in configmanager
2020-01-27 15:59:22 -05:00
Jarrod Johnson
4c8ba92856
Change configuration sync to use msgpack
...
This removes use of pickle for config sync over network.
2020-01-27 15:53:29 -05:00
Jarrod Johnson
30398fc434
More explicit follower health checking
...
Be more careful about collective member health assessment,
explicitly closing a follower when it has failure and prefacing
collective commands with a check prior to performing the actual
changes.
2019-11-11 10:49:25 -05:00
Jarrod Johnson
4b6899d4af
Mark node as 'dirty' if it's group is removed
...
Group removal would end up with the on-disk copy not reflecting
the node membership, even though in-memory copy is fine.
Fix by adding the missing dirty mark to the entry.
2019-11-04 13:43:29 -05:00
Jarrod Johnson
a967c224fe
Add TSMSOL plugin
...
This enables ipmi-free access to TSM SOL console
2019-10-29 15:20:40 -04:00
Jarrod Johnson
c0b69f64b8
Error when noderange tries to use secret
...
secret. cannot be used in expressions, provide
an error in such a case.
2019-10-24 12:04:47 -04:00
Jarrod Johnson
f46939b7ec
Add missing comma to api attributes
2019-10-16 13:50:23 -04:00
Jarrod Johnson
0fd4c3b2f7
Merge branch 'master' into nodesearch
2019-10-16 13:24:11 -04:00
Jarrod Johnson
ceced11ae8
Fix python3 compatibility issue
2019-10-14 16:28:32 -04:00