Hardware introspection daemon for OpenStack Ironic
Go to file
Zane Bitter 97f9d34f83 Eliminate SQL injection vulnerability in node_cache
In node_cache.find_node() we were constructing a raw SQL query using
unescaped data that came in on the wire. This presented an SQL injection
vulnerability. To avoid this, use the query builder from SQLAlchemy to
ensure that any input strings are correctly escaped.

Change-Id: I2b0ffa307ec1aa57538733f2e454d2d7e994d656
Story: #2005678
Task: 30992
(cherry picked from commit 9d107900b2)
2019-05-21 11:03:10 +02:00
devstack Merge "Change the default discovery driver to fake-hardware" 2018-04-30 19:09:12 +00:00
doc Merge "Update HTTP API version history" 2018-08-06 13:39:16 +00:00
ironic_inspector Eliminate SQL injection vulnerability in node_cache 2019-05-21 11:03:10 +02:00
playbooks/legacy OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
releasenotes Eliminate SQL injection vulnerability in node_cache 2019-05-21 11:03:10 +02:00
rootwrap.d Add rootwrap filter for systemctl control of dnsmasq 2018-08-31 06:40:45 +00:00
tools Add fsm dot diagram generator 2017-03-01 14:46:28 +02:00
zuul.d OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.gitignore Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.stestr.conf Use ostestr unit test runner 2017-10-02 14:28:58 +00:00
CONTRIBUTING.rst Invalid links in doc file 2018-07-05 16:36:29 +07:00
LICENSE Apache license 2014-10-03 17:15:55 +02:00
README.rst Trivial: Update pypi url to new url 2018-04-24 09:57:43 +08:00
babel.cfg Add scripts to manage translations 2015-03-04 00:07:37 +00:00
config-generator.conf Centralize config options 2018-01-04 20:43:58 -08:00
ironic-inspector.8 Trivial: Update pypi url to new url 2018-04-24 09:57:43 +08:00
lower-constraints.txt Switch to using stestr 2018-07-14 07:49:50 -04:00
policy-generator.conf Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
requirements.txt Switch to using stestr 2018-07-14 07:49:50 -04:00
rootwrap.conf TrivialFix: Fix typo in the configuration file 2016-09-30 10:56:53 +07:00
setup.cfg Declare support for Python 3.5 in setup.cfg 2018-01-31 12:46:06 +01:00
setup.py Updated from global requirements 2017-03-02 11:45:30 +00:00
test-requirements.txt Switch to using stestr 2018-07-14 07:49:50 -04:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/rocky 2018-08-09 13:16:16 +00:00

README.rst

Hardware introspection for OpenStack Bare Metal

Introduction

image

This is an auxiliary service for discovering hardware properties for a node managed by Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address, user name and password).

Note

ironic-inspector was called ironic-discoverd before version 2.0.0.

Release Notes

For information on any current or prior version, see the release notes.