Recent changes to Confluent_configuration

Confluent_configuration modified by Jarrod Johnson

Jarrod Johnson — Wed, 06 Aug 2014 20:11:06 -0000

--- v4
+++ v5
@@ -19,7 +19,7 @@
 
-
+
 xCAT 2 Confluent
 /\z/-bmc {nodename}-bmc
|10.1.($1/255).($1%255)| 10.1.{n1/255}.{n1%255}
|10.1.($1/255).($1%255)| 10.1.{n0/255}.{n0%255}
 N/A 10.1.{enclosure.id}.{enclosure.bay}
 /n/bmc/ *TBD*, possibly {nodename.replace('n', 'bmc')}
 /(\D+)\d+\D+(\d+)/test$1$2/ N/A (TODO if requested)

Confluent_configuration modified by Jarrod Johnson

Jarrod Johnson — Wed, 06 Aug 2014 20:08:56 -0000

--- v3
+++ v4
@@ -24,3 +24,11 @@
 /n/bmc/*TBD*, possibly {nodename.replace('n', 'bmc')}
 /(\D+)\d+\D+(\d+)/test$1$2/N/A (TODO if requested)
 
+
+On Disk
+============================
+Data is committed to disk in a DBM style backing store.
+
+Backup format
+============================
+Backup data is to be in .json files.  inheritedfrom entries are omitted.  value attributes alongside expression attributes are omitted.  cryptvalue entries are converted to base64.  The master integrity and privacy keys are encrypted by a backup password which is required to restore the encrypted values.  See [Confluent_security] for more on that aspect.

Confluent_configuration modified by Guang Cheng Li

Guang Cheng Li — Mon, 04 Aug 2014 02:54:05 -0000

--- v2
+++ v3
@@ -1,3 +1,5 @@
+[[include ref=Design_Warning]]
+
 Organization
 ============
 In xCAT 2, there are two configuration schemes, 'table' and 'objdef'.  For confluent, converge the two models.  The result is something that resembles objdef, but with dot-delimited names to help organize data and provide a way to map 'tabedit' behavior as desired.  Also, rename and consolidate concepts for more understandable use. For example:

Confluent_configuration modified by Jarrod Johnson

Jarrod Johnson — Fri, 01 Aug 2014 15:03:07 -0000

--- v1
+++ v2
@@ -13,5 +13,12 @@

 Expressions
 =======================
-Expressions are dramatically changed.  In xCAT 2, regular expressions were used and extended by allowing 'Safe' compartment evaluation of result data with a blacklist of forbidden low level operations.  This results in a syntax that is unbelievably flexible, but slow, hard to follow, and likely able to do unexpected things from a security standpoint.  Confluent expressions, like inheritance improve performance by doing all evaluations on write rather than read of data.  One additional capability is the ability to read in values from other attributes.  Some example xCAT2 expressions and confluent equivalents:
-
+Expressions are dramatically changed.  In xCAT 2, regular expressions were used and extended by allowing 'Safe' compartment evaluation of result data with a blacklist of forbidden low level operations.  This results in a syntax that is unbelievably flexible, but slow, hard to follow, and likely able to do unexpected things from a security standpoint.  Confluent expressions, like inheritance improve performance by doing all evaluations on write rather than read of data.  One additional capability is the ability to read in values from other attributes.  Some example xCAT2 expressions and confluent equivalents (using the relatively new 'easy' xCAT expressions when possible:
+
+
+
+
+
+
+
+xCAT 2 Confluent
/\z/-bmc {nodename}-bmc
|10.1.($1/255).($1%255)| 10.1.{n1/255}.{n1%255}
N/A 10.1.{enclosure.id}.{enclosure.bay}
/n/bmc/ *TBD*, possibly {nodename.replace('n', 'bmc')}
/(\D+)\d+\D+(\d+)/test$1$2/ N/A (TODO if requested)

Confluent_configuration modified by Jarrod Johnson

Jarrod Johnson — Fri, 01 Aug 2014 14:53:47 -0000

Organization

In xCAT 2, there are two configuration schemes, 'table' and 'objdef'. For confluent, converge the two models. The result is something that resembles objdef, but with dot-delimited names to help organize data and provide a way to map 'tabedit' behavior as desired. Also, rename and consolidate concepts for more understandable use. For example:

lsdef shows 'bmc' and nodels thinks of it as 'ipmi.bmc'. confluent uses 'hardwaremanagement.manager'
'mp.mpa' becomes 'enclosure.manager'

Some attributes are removed entirely for now (installnic). At least long enough to have people comfortable with the concept that it need not be defined for the common case. Boot from media may indicate a return of the need of it.

Inheritance

Inheritence behaves on the surface much like xCAT 2. Under the covers, performance is dramatically improved on read as inheritance is done and re-evaluated on writes and results stored in memory and on disk. Backup process will skip the result fields and only get the source material, restore will re-evaluate the information

Expressions

Expressions are dramatically changed. In xCAT 2, regular expressions were used and extended by allowing 'Safe' compartment evaluation of result data with a blacklist of forbidden low level operations. This results in a syntax that is unbelievably flexible, but slow, hard to follow, and likely able to do unexpected things from a security standpoint. Confluent expressions, like inheritance improve performance by doing all evaluations on write rather than read of data. One additional capability is the ability to read in values from other attributes. Some example xCAT2 expressions and confluent equivalents:

xCAT 2	Confluent
/\z/-bmc	{nodename}-bmc
\|10.1.($1/255).($1%255)\|	10.1.{n1/255}.{n1%255}
\|10.1.($1/255).($1%255)\|	10.1.{n0/255}.{n0%255}
N/A	10.1.{enclosure.id}.{enclosure.bay}
/n/bmc/	TBD, possibly {nodename.replace('n', 'bmc')}
/(\D+)\d+\D+(\d+)/test$1$2/	N/A (TODO if requested)