ironic-inspector/releasenotes/notes/pxe-filter-dnsmasq-not-know...

14 lines
594 B
YAML

---
features:
- |
Adds wildcard ignore entry to ``dnsmasq`` PXE filter. When node
introspection is active, or if ``node_not_found_hook`` is set in the
configuration the ignore is removed from the wildcard entry. This ensures
that unknown nodes do not accidentally boot into the introspection image
when no node introspection is active.
This brings ``dnsmasq`` PXE filter driver feature parity with the
``iptables`` PXE filter driver, which uses a firewall rule to block any
DHCP request on the interface where Ironic Inspector's DHCP server is
listening.