~tilmanbaumann/charms/trusty/contrail-control/trunk : changes

~tilmanbaumann/charms/trusty/contrail-control/trunk » Changes from revision 33

From Revision 33 to 14

Rev	Summary	Authors	Date
33	Adding xmpp_auth option Adding xmpp_auth option Sparating xmpp_auth_enable from tls settings Making it switchable via xmpp_auth config option	Tilman Baumann	6 years ago
32	enable TLS for XMPP communication as of contrail 3 enable TLS for XMPP communication as of contrail 3 TLS is enabled unconditionally for contail 3.0 and above deployments to make sure communication is secure by default. XMPP clients are vrouter agents on compute nodes. XMPP servers are contrail-control nodes. Certificates are generated automatically from a PKI charm (e.g. easyrsa with a Subject Alternative Name field containing an IP address on a control network which is used by both contrail-control and neutron-contrail to communicate with each other. Using a Subject Alternative Name (SAN) with an IP address avoids a dependency on a DNS infrastructure while keeping the communication secure between endpoints that are related. Client authentication by XMPP servers was not supported at the time of writing hence there is no mention of that in the code. As of Juju 2.x network spaces can be used if an underlying cloud supports them. In order to facilitate that support one should bind control-node endpoint to a specific network space. Otherwise, old mechanisms such as unit private address are going to be used to retrieve an ip address to be included into a certificate. Control node address fetching mechanism has changed as well: instead of just doing a relation-get for a private IP address of a control-node unit a different value is taken from the relation data called control_node_ip (available due to modifications on the contrail-control side) - it is either an address in the network space which control-node endpoint is bound to or a fall-back address (unit private address).	Dmitrii Shcherbakov	7 years ago
31	hooks: pep8 refactoring hooks: pep8 refactoring	Dmitrii Shcherbakov	7 years ago
30	Merge Ante Karamatic's changes (with modifications) Merge Ante Karamatic's changes (with modifications)	Robert Ayres	7 years ago
29	Ignore unprovisioning failure Ignore unprovisioning failure	Robert Ayres	7 years ago
28	Remove unrequired openstack-origin option Remove unrequired openstack-origin option	Robert Ayres	7 years ago
27	Add supervisor files for contrail 3.1 Add supervisor files for contrail 3.1 *Alter ntpq script for contrail 3.1	Robert Ayres	7 years ago
26	Sync charm helpers Sync charm helpers	Robert Ayres	7 years ago
25	Minor fixes for control-network option Minor fixes for control-network option	Robert Ayres	7 years ago
24	Add control-network option, fixes lp #1597791 Add control-network option, fixes lp #1597791	Robert Ayres	7 years ago
23	Minor fix Minor fix	Robert Ayres	7 years ago
22	Add retry to provisioning Add retry to provisioning	Robert Ayres	8 years ago
21	Fake ntp status when inside container Fake ntp status when inside container	Robert Ayres	8 years ago
20	Don't assume first keystone unit when provisioning Don't assume first keystone unit when provisioning	Robert Ayres	8 years ago
19	Don't assume first contrail-configuration unit when provisio... Don't assume first contrail-configuration unit when provisioning, fixes lp #1511017	Robert Ayres	8 years ago
18	Update README Update README *Add comments	Robert Ayres	8 years ago
17	Merge Tony Liu's changes: Merge Tony Liu's changes: Add Node Manager support Add install-keys config option	Robert Ayres	8 years ago
16	Sync charm helpers Sync charm helpers	Robert Ayres	8 years ago
15	Provision control node (now mandatory) Provision control node (now mandatory)	Robert Ayres	8 years ago
14	Sync charm helpers Sync charm helpers	Robert Ayres	8 years ago

Older »