5f610b64b7
Place Confluent CA certs into TLS anchors
...
When processes may update the certificate authorities, the confluent
CA trust would be lost. Place it appropriately so that
update-ca-trust will keep it in the appropriate place.
2022-03-02 08:40:27 -05:00
6f194f26c0
Fix contents and permissions
...
NetworkManager demands specific
permissions
2022-02-25 16:18:54 -05:00
71c60be659
Fix el8 dns configuration
...
The modification to add dns search must only be suggested
if the respective ip version section is enabled.
2022-02-25 15:22:45 -05:00
58a9aa03ef
Add DNS domain to el8 network manager
2022-02-25 09:48:56 -05:00
19a370b0f5
Add explicit client version dependency
2022-02-25 07:31:12 -05:00
47a517aec1
Decrease retries to do https retries with bad TLS cert
2022-02-24 16:37:48 -05:00
1f7bd1a28a
Fix autoconsole output on diskless
2022-02-24 16:27:32 -05:00
89cc49c4fc
Add loginname to nodeshell man page
2022-02-24 16:08:50 -05:00
50da83b4f5
Fix api token message not being pushed
2022-02-24 15:56:29 -05:00
15f4cc085d
Aggressively flush out error output
2022-02-24 15:46:38 -05:00
d7df1e7891
Prevent users from dupe group memberships
2022-02-24 15:06:41 -05:00
1a5f5aea3a
Try an alternative approach to autoconsole errors
2022-02-24 12:18:41 -05:00
7068287ba3
Fix autocons spurious output
2022-02-24 10:25:59 -05:00
fb1f6b70bb
Improve error handling on bad TLS cert
...
Bad TLS cert is a common problem, provide better feedback.
2022-02-24 09:27:40 -05:00
2c9be7a4c4
Remove slp snoop of XCC
...
SSDP snoop catches XCC, and do only
SSDP for consistent format of
snoop info coming into the
xcc handler.
2022-02-24 08:08:50 -05:00
24ef12e029
Disable autoconf of ipv6 in el
...
If autoconf is allowed when link is brought up, it scan
confuse redhat network configuration when it already finds
an ipv6 address.
2022-02-23 16:58:29 -05:00
e390618dd9
Fix handling without olduuid in database
2022-02-23 10:13:06 -05:00
8f4846c248
Fix for partial returns
...
full_net_config may not always apply,
be sure to gracefully degrade.
2022-02-22 17:08:23 -05:00
ac8918c2b9
Add ips to ssh principals
...
For any static address, also grant
certificate for that.
2022-02-22 16:48:58 -05:00
fdc9d94408
Also register to run before coreos-ignition-setup-user
...
For coreos, make sure we preempt either name.
2022-02-22 14:30:48 -05:00
3cf9edeeb8
Stub out buffering for shell sessions
...
This is not yet handled anyway.
For future, establish norm of a nodeid
to prefix multiple distinct sessions.
2022-02-22 08:49:31 -05:00
8fab8238ed
Disambiguate console from shell buffer
...
There is room for the console replay to get confused,
fix by fully qualifying the console name.
2022-02-18 17:31:13 -05:00
80293efe57
Address coverity false-positives
...
Technically, the fread won't reach the
length index, but change the order
anyway to reassure coverity.
2022-02-17 17:09:21 -05:00
b463a53146
Cleanup per coverity
...
Fix a number of concerns that coverity reports
2022-02-17 17:05:00 -05:00
58b55b6ef6
Error on trying to double-add nodes or groups
...
Prevent user from repeatedly adding the
same group to a node or same node to a group.
2022-02-16 11:58:22 -05:00
33be75a9a2
Markup bandit exceptions
...
Apply bandit exceptions and explain
the rationale in each case
2022-02-16 09:10:33 -05:00
f10a27fd7a
Switch to mkstemp
...
Use mkstemp to more confidently reserve a filename as expected.
2022-02-15 17:13:04 -05:00
3f53cb939a
Add mkdir -p to build script for genesis
2022-02-15 10:32:39 -05:00
961398e34e
Bump version to cover 8.6 update
2022-02-15 10:29:18 -05:00
13b3b081cf
Update to new rdma version in el8.6
2022-02-15 10:28:19 -05:00
3e6b67f9a7
Error if user omits attributes for options
...
If user indicates manipulation of
attributes through -c, -p, or -e,
but none are specified, print an error
instead.
2022-02-14 09:24:15 -05:00
93a5496899
Reject reverse range noderange
...
It has been stated that no one would want to do this
on purpose, and thus it should reject. The rationale
being that if no one wants to do this, but did it
anyway, they presumably made a mistake.
So now such attempts will be blocked.
Keep the dead logic around for now
in case a future opinion changes things back.
2022-02-11 15:20:41 -05:00
bd428790ce
Try for more informative messoge an expression syntax error
2022-02-11 14:51:53 -05:00
f0c4943612
Merge branch 'master' of github.com:lenovo/confluent
2022-02-11 14:33:47 -05:00
f547071d38
Warn user of unworkable syntax
...
When used in {} expressions, attributes must obey python syntax rules,
try out the attribute name and report the issue when it would be a problem.
2022-02-11 14:32:52 -05:00
fbd3a442ac
Support numeric owner/group in syncfile list
2022-02-08 17:38:01 -05:00
b809514ef9
Fix osdeploy initialize dependency on master key
...
Make sure confluent has made /etc/confluent, and further always initialize the
encryption key, as it will almost certainly
be needed and easiest to just always
generate on first startup.
2022-02-08 16:40:41 -05:00
b1032d8c4c
Specify write mode for confluent_uuid file
2022-02-08 12:31:04 -05:00
00bedf6946
Shuffle confluenntuuid to earlier in copernicus
...
Currently, ssdp handler behavior needs confluentuuid first, if
it is to have any effect.
2022-02-08 12:06:52 -05:00
e7b1791df3
Modify input in bandit-friendly way
...
bandit erroneously flags 'input' based
on possible python2-ism. Avoid the
error by using 'getinput', making that
input or raw_input based on the python version.
2022-02-08 10:59:15 -05:00
6e03f6ee0a
Correct syntax typo
2022-02-08 10:49:42 -05:00
358b719cec
Implement deployment binding for new installs
...
When doing osdeploy initialize,
save the uuid and have deployment
targets specifically pair back with site via
uuid.
2022-02-08 10:41:27 -05:00
b0b8ee128b
Correct imgutil typo
2022-02-08 09:35:10 -05:00
094c97696f
Merge tag '3.3.5'
...
Fixes for esxi7 and el7
2022-02-07 13:07:36 -05:00
c2b66958d7
Update imgutil to not need rpm-python
...
EL7 does not have rpm for python3, use the cli instead for
such a case.
2022-02-07 12:23:44 -05:00
4a38a88136
Add recognition of RHEL9 media
2022-02-07 09:20:05 -05:00
b1cbca414a
Fix compatibility with CentOS7 for imgutil build -s
2022-02-07 08:39:45 -05:00
522d7e2b59
Fix configmanager issue witht more recent python3
2022-02-04 16:21:39 -05:00
7c169f635a
Actually correct deb builder for vtbufferd
2022-02-04 16:06:12 -05:00
82f85b8aef
Fix deb build of vtbuffered
2022-02-04 16:04:27 -05:00
Jarrod Johnson