mirror of https://github.com/apache/cloudstack.git
2cf838cc1d
- mTLS implementation for cluster service communication - Listen only on the specified cluster node IP address instead of all interfaces - Validate incoming cluster service requests are from peer management servers based on the server's certificate dns name which can be through global config - ca.framework.cert.management.custom.san - Hardening of KVM command wrapper script exeicution - Improve API server integration port check - cloudstack-management.default: don't have JMX configuration if not needed. JMX is used for instrumentation; users who need to use it should enable it explicitly Co-authored-by: Abhishek Kumar <abhishek.mrt22@gmail.com> Co-authored-by: Wei Zhou <weizhou@apache.org> Co-authored-by: Rohit Yadav <rohit.yadav@shapeblue.com> Signed-off-by: Abhishek Kumar <abhishek.mrt22@gmail.com> |
||
|---|---|---|
| .. | ||
| agent-lb | ||
| ca | ||
| cluster | ||
| config | ||
| db | ||
| direct-download | ||
| events | ||
| ipc | ||
| jobs | ||
| managed-context | ||
| quota | ||
| rest | ||
| security | ||
| spring | ||
| pom.xml | ||