mirror of https://github.com/apache/cloudstack.git
2cf838cc1d
- mTLS implementation for cluster service communication - Listen only on the specified cluster node IP address instead of all interfaces - Validate incoming cluster service requests are from peer management servers based on the server's certificate dns name which can be through global config - ca.framework.cert.management.custom.san - Hardening of KVM command wrapper script exeicution - Improve API server integration port check - cloudstack-management.default: don't have JMX configuration if not needed. JMX is used for instrumentation; users who need to use it should enable it explicitly Co-authored-by: Abhishek Kumar <abhishek.mrt22@gmail.com> Co-authored-by: Wei Zhou <weizhou@apache.org> Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com> Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com> |
||
|---|---|---|
| .. | ||
| cloudstack-agent.default | ||
| cloudstack-agent.service | ||
| cloudstack-management.default | ||
| cloudstack-management.service | ||
| cloudstack-rolling-maintenance@.service | ||
| cloudstack-usage.default | ||
| cloudstack-usage.service | ||