df97e808c6
Wire up client retrieval of remoteconfig
...
remoteconfig can now watch for completion and return
data to client
2021-03-17 17:46:27 -04:00
a3c8c305c1
Add ansible supervisory code
2021-03-16 14:19:44 -04:00
7026fdfa3a
WIP change to enhance selfservice api for ansible
...
Begin work on extending selfservice to allow nodes
to request the deployer run ansible plays.
2021-03-12 12:23:58 -05:00
2d6bdffebe
Finalize the ssh.trustnodes facility
...
This is the confluent approach to handling the same
problem that xCAT SSH Zones do.
2021-01-08 14:05:37 -05:00
a2a1142f18
Draft implementation of ssh trust segmentation
...
Have equiv optionally be restricted to a subset of nodes
so that node to node ssh may be enabled within subsets
without enabling across the board.
This is akin to 'zones' in xCAT, albeit a bit more flexible
and covering both users and administrative access.
2021-01-06 11:52:43 -05:00
8d47395e53
Add fetch of '<script>.d' scripts
...
This can be used by firstboot/post scripts to
get modularized scripts.
2020-12-09 16:46:58 -05:00
edaaa2393d
Hook up apiclient to TPM2 persistence, when available
2020-11-06 16:38:05 -05:00
f7e7d05729
Add TPM2 support to node api key handling
...
This is an optional capability that image payloads may use
to use the TPM2 to protect an apikey as an alternative to
arming a weak authentication invocation
2020-11-06 10:00:36 -05:00
ed41d93de5
Add remote authentication configuration
...
While our security guidelines preclude allowing host to know the password,
it is considered acceptable to do the out-of-band authentication configuration.
Have configbmc request a unicast remote configuration. This should handle authentication
as well as ensuring ongoing consistency between out of band and in-band configuration
methods.
2020-10-20 15:51:46 -04:00
504bee2d2a
Fix problem when domain was not set
...
domain was checked even if domain not defined,
make sure domain is defined before trying
to use it.
2020-10-08 10:39:29 -04:00
a126270570
Fix scope of hm attributes in bmcconfig
2020-08-14 16:05:46 -04:00
997b43045a
Make preparations for a configbmc for inband config
2020-08-14 15:29:55 -04:00
704e8379f0
Have firmwaredhcp become static to OS
2020-08-03 11:43:22 -04:00
2f4f9a39a6
Add osdeploy function to trust nodes
...
osdeploy initialize -l will
endeavor to do to the local
management node the same thing the deployment does to the nodes.
2020-07-30 14:44:02 -04:00
fa934ce334
Fix insertion of manager
...
The manager insertion failed
with the domain from nodes removed.
2020-07-29 13:52:28 -04:00
dd91213969
Fix mistakes in the hostname support
2020-07-29 13:39:48 -04:00
e93c3241ed
Provide for more hostnames
...
This permits ssh infrastructure
to have multihomed nodes
handled more effeectively.
2020-07-29 13:08:03 -04:00
5f1ba49a12
Fix behavior with unspecified domain name
...
Ensure string is only checked if it is a string.
2020-07-22 13:56:55 -04:00
2bfbfeb4d3
Add ntp to deploycfg data
2020-07-09 11:35:11 -04:00
4ecae144d9
Attempt to have both short and long names
...
In ssh, long or short name may matter and user may use short
or long names as node names.
Try to make ssh equipped to be apathetic about the choice.
2020-07-02 12:40:30 -04:00
fa6d42b1b3
Clear stagedprofile
...
staged profile should be cleared on completion.
2020-07-01 15:35:17 -04:00
2c30d4069c
Correct syntax error in selfservice
2020-07-01 15:20:06 -04:00
78e5d343e7
Implement a 'staged' phase of profile
...
This allows a limbo where remote deployment is blocked
but final deployment is not yet flagged.
2020-07-01 14:01:28 -04:00
1a664f669c
Use client provided hint for net selection
...
More precise then trying to do by IP subnet
2020-06-30 14:58:04 -04:00
d4736e0aad
Do not respond to deployment calls without quorum
2020-06-17 11:09:05 -04:00
fa9f9c1d99
Tolerate certain HTTP clients
...
Some HTTP clients put the port
number into the host header.
We don't care about port number.
2020-06-08 11:29:31 -04:00
82ab56ebb4
Add boot encryption support to EL8
...
The stock profile should now encrypt if requested
2020-06-02 16:05:44 -04:00
cf9f4a9691
Add grub password to attributes
...
This permits opting into using
a password to block editing
of grub configuration.
2020-06-02 10:59:30 -04:00
335d06ea4c
Default to US if management node is n/a
...
localectl can be n/a for some scenarios,
default to US for such cases.
2020-05-28 17:07:17 -04:00
0a79307cc5
Fix scope of keymap
2020-05-19 17:05:43 -04:00
442902ecd8
Fix mistake in selfservice api
2020-05-19 16:49:07 -04:00
e696566b42
Add dns domain to deployment
...
This permits the deployment profiles
to pull in specified DNS domain.
2020-05-19 15:07:10 -04:00
eec7236110
Rename dns server attribute
2020-05-19 14:45:06 -04:00
ceefb936c2
Add keymap from donor system
...
RHEL requires this to autoinstall graphically.
2020-05-18 14:17:57 -04:00
9caf8056ec
Correct split
...
bytes need bytes to split
2020-05-18 13:50:48 -04:00
317a1c572b
Fix startswith parameter
...
Needed to be bytes for subprocess
2020-05-18 13:30:22 -04:00
2b39b9b5a6
Correct string in locale defaulting
2020-05-18 13:02:50 -04:00
5dee338d50
Fix lang in EL8 install
...
While text mode does not care, if user goes down graphical
path, it pauses installer.
2020-05-18 12:52:31 -04:00
485b5e0dce
Add textconsole to deploycfg
...
It turns out that the SPCR is
not automatically populated.
Provide a hint via deploycfg
as to whether the user has
configured confluent for text
console access.
2020-05-18 10:41:04 -04:00
f85693b7e3
Fix Headers in new replies
...
Needs to be a nested tuple.
2020-05-13 16:53:36 -04:00
7dcad26002
Add hook for registering install completion
...
This will allow watching the
profile for changes to know
when install is utterly complete.
2020-05-13 16:29:10 -04:00
59aabb0e69
Fix apikey storage
...
Adapt to how crypted. values are handled.
2020-04-21 09:01:42 -04:00
931c7f25d1
Change apikey to crypted
...
Since it will be crypted, makes sense
for it to be presented same way as rootpassword.
2020-04-21 08:24:01 -04:00
149e41c33c
Add DNS information
...
Enable setting DNS servers in
the deployment.
2020-04-20 14:27:14 -04:00
eb2301b22e
Add nodelist to selfservice
...
This permits a node to get list of nodes,
for example to build shosts.equiv
2020-04-20 11:11:29 -04:00
49a523ca5e
Add timezone to deploycfg
...
This is generally needed to install
an operating system.
2020-04-17 13:21:15 -04:00
e4a9216683
Add root password to selfservice
...
This allows installers to set the
requested root password, or
not.
2020-04-16 17:07:31 -04:00
16667ed41c
Add SSH cert to self api
...
This allows nodes to get a cert from
confluent.
2020-04-16 13:11:05 -04:00
2c1ddabf32
Rename api.* attributes
...
Gather them into the deployment
category.
2020-04-15 11:50:10 -04:00
24bc1210d0
Numerous fixes to the OS deploy
...
Most notably, change to safe_dump for yaml.
For the various initrd items, changes
to actually trigger the relevant bits
of the RH installer.
2020-04-14 16:34:50 -04:00
Jarrod Johnson