ganeti-rapi is the daemon providing a remote API for Ganeti clusters.
It is automatically started on the master node, and by default
it uses SSL encryption. This can be disabled by passing the
--no-ssl option, or alternatively the
certificate used can be changed via the -C
option and the key via the -K option.
The daemon will listen to the "ganeti-rapi" tcp port, as listed in the system services database, or to port 5080 by default.
See the Ganeti remote API documentation for further information.
Requests are logged to /usr/local/var/log/ganeti/rapi-daemon.log, in the same format as for the node and master daemon.
All query operations are allowed without authentication. Only the modification operations require authentication, in the form of basic authentication.
The users and their rights are defined in a file named rapi_users, located in the /usr/local/var/lib/ganeti directory. The users should be listed one per line, in the following format:
username password options
Currently the options field should equal the string write in order to actually give write permission for the given users. Example:
rclient secret write guest tespw
The first user (rclient) will have read-write rights, whereas the second user does only have read (query) rights, and as such is no different than not using authentication at all.
Report bugs to http://code.google.com/p/ganeti/ or contact the developers using the ganeti mailing list <ganeti@googlegroups.com>.
Ganeti overview and specifications: ganeti(7) (general overview), ganeti-os-interface(7) (guest OS definitions).
Ganeti commands: gnt-cluster(8) (cluster-wide commands), gnt-job(8) (job-related commands), gnt-node(8) (node-related commands), gnt-instance(8) (instance commands), gnt-os(8) (guest OS commands), gnt-backup(8) (instance import/export commands), gnt-debug(8) (debug commands).
Ganeti daemons: ganeti-watcher(8) (automatic instance restarter), ganeti-cleaner(8) (job queue cleaner), ganeti-noded(8) (node daemon), ganeti-masterd(8) (master daemon), ganeti-rapi(8) (remote API daemon).
Copyright (C) 2006, 2007, 2008, 2009 Google Inc. Permission is granted to copy, distribute and/or modify under the terms of the GNU General Public License as published by the Free Software Foundation; either version 2 of the License, or (at your option) any later version.
On Debian systems, the complete text of the GNU General Public License can be found in /usr/share/common-licenses/GPL.