Hardware introspection daemon for OpenStack Ironic
Go to file
Zane Bitter 17c796b491 Eliminate SQL injection vulnerability in node_cache
In node_cache.find_node() we were constructing a raw SQL query using
unescaped data that came in on the wire. This presented an SQL injection
vulnerability. To avoid this, use the query builder from SQLAlchemy to
ensure that any input strings are correctly escaped.

Change-Id: I2b0ffa307ec1aa57538733f2e454d2d7e994d656
Story: #2005678
Task: 30992
(cherry picked from commit 9d107900b2)
2019-05-21 11:04:10 +02:00
devstack Switch documentation to hardware types 2018-04-13 16:54:19 +00:00
doc Switch documentation to hardware types 2018-04-13 16:54:19 +00:00
ironic_inspector Eliminate SQL injection vulnerability in node_cache 2019-05-21 11:04:10 +02:00
playbooks/legacy OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
releasenotes Eliminate SQL injection vulnerability in node_cache 2019-05-21 11:04:10 +02:00
rootwrap.d Add rootwrap filter for systemctl control of dnsmasq 2018-08-31 06:41:03 +00:00
tools Add fsm dot diagram generator 2017-03-01 14:46:28 +02:00
zuul.d OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.gitignore Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.stestr.conf Use ostestr unit test runner 2017-10-02 14:28:58 +00:00
CONTRIBUTING.rst Remove sample policy and config files 2018-02-06 10:36:12 -08:00
LICENSE Apache license 2014-10-03 17:15:55 +02:00
README.rst Replace http with https for doc links 2018-01-02 06:25:34 +00:00
babel.cfg Add scripts to manage translations 2015-03-04 00:07:37 +00:00
config-generator.conf Centralize config options 2018-01-04 20:43:58 -08:00
ironic-inspector.8 Final discoverd -> inspector rename/move pass 2015-06-15 15:34:00 +02:00
policy-generator.conf Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
requirements.txt Retry port lists on failure in PXE filter periodic sync 2018-02-14 14:44:43 -08:00
rootwrap.conf TrivialFix: Fix typo in the configuration file 2016-09-30 10:56:53 +07:00
setup.cfg Declare support for Python 3.5 in setup.cfg 2018-01-31 12:46:06 +01:00
setup.py Updated from global requirements 2017-03-02 11:45:30 +00:00
test-requirements.txt Gate fix: Cap hacking to avoid gate failure 2018-05-10 11:49:43 +00:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/queens 2018-02-07 15:35:42 +00:00

README.rst

Hardware introspection for OpenStack Bare Metal

Introduction

image

This is an auxiliary service for discovering hardware properties for a node managed by Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given it's power management credentials (e.g. IPMI address, user name and password).

Note

ironic-inspector was called ironic-discoverd before version 2.0.0.

Release Notes

For information on any current or prior version, see the release notes.