[ClusterLabs] Antw: [EXT] Anyone using remote-clear-port or remote-tls-port for remote CIB administration?

[Ulrich Windl]

>>> Ken Gaillot <kgaillot at redhat.com> schrieb am 02.02.2021 um 17:40 in
Nachricht
<5d7d52f14417e6e8baee49dfbc23884b5183b073.camel at redhat.com>:
> Hi all,
> 
> Pacemaker has a feature allowing CIB modifications to be made from
> hosts that are not cluster nodes:
> 
>
https://clusterlabs.org/pacemaker/doc/en‑US/Pacemaker/2.0/html‑single/Pacemake

> r_Administration/#s‑remote‑connection
> 
> Does anyone actually use this? If it is being used, I have no problem
> keeping it, but if not, I would like to deprecate it and eventually
> drop support, to help with code maintenance.
> 
> My gut feeling is that remote administration is moving more towards
> GUIs and orchestrators, and the Pacemaker feature is not particularly
> useful anymore.

It looks more like a security risk IMHO.

> ‑‑ 
> Ken Gaillot <kgaillot at redhat.com>
> 
> _______________________________________________
> Manage your subscription:
> https://lists.clusterlabs.org/mailman/listinfo/users 
> 
> ClusterLabs home: https://www.clusterlabs.org/