xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2026-09-29 00:31:09 +00:00
Code Issues Projects Releases Wiki Activity

Flesh out some of the design points

Browse Source 
Mostly adding more comments in the areas that
will be implementing the design so that I'll
remember what I had in mind.
This commit is contained in:
Jarrod Johnson
2016-08-24 16:44:07 -04:00
parent 8f7199bce6
commit 51ae476077
1 changed files with 48 additions and 7 deletions
Download Patch File Download Diff File Expand all files Collapse all files
confluent_server/confluent/discovery.py
+48 -7
View File
@@ -43,13 +43,34 @@
def add_validated_fingerprint(nodename, fingerprint, role='manager'):
"""Add a physically validated certificate fingerprint
When switch
When a secure validater validates a fingerprint, this function is used to
mark that fingerprint as validated.
"""
class DiscoveredNode(object):
def __init__(self, uuid, serial=None, netinfo=None,
enclosureinfo=None, model=None, modelnumber=None):
def __init__(self, uuid, serial=None, hwaddr=None, model=None,
modelnumber=None):
"""A representation of a discovered node
This provides a representation of a discovered, but not yet located
node. The goal is to be given enough unique identifiers to help
automatic and manual selection have information to find it.
:param uuid: The UUID as it would appear in DMI table of the node
other UUIDs may appear, but a node is expected to be held
together by this UUID, and ideally would appear in PXE
packets. For certain systems (e.g. enclosure managers),
this may be some other UUID if DMI table does not apply.
:param serial: Vendor assigned serial number for the node, if available
:param hwaddr: A primary MAC address that may be used for purposes of
locating the node. For example mac address that is used
to search ethernet switches.
:param model: A human readable description of the model.
:param modelnumber: If applicable, a numeric representation of the
model.
"""
self.uuid = uuid
self.serial = serial
self.netinfo = netinfo
@@ -60,7 +81,7 @@ class DiscoveredNode(object):
def add_fingerprint(self, type, hashalgo, fingerprint):
"""Add a fingerprint to a discovered node
Provide either an in-band certificate or manager certificet
Provide either an in-band certificate or manager certificate
:param type: Indicates whether the certificate is a system or manager
certificate
@@ -69,12 +90,32 @@ class DiscoveredNode(object):
:param fingerprint: The signgature of the public certificate
:return:
"""
self.fingerprints[type] = (hashalgo, fingerprint, verified)
self.fingerprints[type] = (hashalgo, fingerprint)
def identify(self):
def identify(self, nodename):
"""Have discovered node check and auto add if appropriate
After discovery examines a system,
After discovery examines a system, location plugins or client action
may promote a system. This is the function that handles promotion of
a 'discovered' system to a full-fledged node.
:param nodename: The node name to associate with this node
:return:
"""
# Ok, so at this point we want to pull in data about a node, and
# attribute data may flow in one of a few ways depending on things:
# If the newly defined node *would* have a hardwaremanagement.method
# defined, then use that. Otherwise, the node should suggest
# it's own. If it doesn't then we use the 'ipmi' default.
# If it has a password explictly to use from user, use that. Otherwise
# generate a random password unique to the end point and set
# that per-node.
# If the would-be node has a defined hardwaremanagement.manager
# and that defined value is *not* fe80, reprogram the BMC
# to have that value. Otherwise, if possible, take the current
# fe80 and store that as hardwaremanagement.manager
# If no fe80 possible *and* no existing value, error and do nothing
# if security policy not set, this should only proceed if fingerprint is
# validated by a secure validator.