Hardware introspection daemon for OpenStack Ironic
Go to file
Zane Bitter 67ff87ebca Eliminate SQL injection vulnerability in node_cache
In node_cache.find_node() we were constructing a raw SQL query using
unescaped data that came in on the wire. This presented an SQL injection
vulnerability. To avoid this, use the query builder from SQLAlchemy to
ensure that any input strings are correctly escaped.

Change-Id: I2b0ffa307ec1aa57538733f2e454d2d7e994d656
Story: #2005678
Task: 30992
(cherry picked from commit 9d107900b2)
2019-05-21 10:47:31 +02:00
api-ref/source Removing two deprecated values from json responses 2019-03-14 15:18:18 +01:00
devstack Pass reset_interfaces when updating a driver from the rules 2019-03-14 11:02:40 +01:00
doc Remove the repetition words in usage.rst 2018-11-13 18:40:34 +08:00
ironic_inspector Eliminate SQL injection vulnerability in node_cache 2019-05-21 10:47:31 +02:00
playbooks/legacy/ironic-inspector-grenade-dsvm OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
releasenotes Eliminate SQL injection vulnerability in node_cache 2019-05-21 10:47:31 +02:00
rootwrap.d Support ip6tables for iptables pxe filter 2018-11-07 09:53:47 +08:00
tools Wrap Flask into oslo.service 2018-10-23 09:20:16 +08:00
zuul.d OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.gitignore Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
.gitreview OpenDev Migration Patch 2019-04-19 19:36:58 +00:00
.stestr.conf Use ostestr unit test runner 2017-10-02 14:28:58 +00:00
CONTRIBUTING.rst Invalid links in doc file 2018-07-05 16:36:29 +07:00
LICENSE Apache license 2014-10-03 17:15:55 +02:00
README.rst Trivial: Update pypi url to new url 2018-04-24 09:57:43 +08:00
babel.cfg Add scripts to manage translations 2015-03-04 00:07:37 +00:00
ironic-inspector.8 Trivial: Update pypi url to new url 2018-04-24 09:57:43 +08:00
lower-constraints.txt Wrap Flask into oslo.service 2018-10-23 09:20:16 +08:00
requirements.txt Wrap Flask into oslo.service 2018-10-23 09:20:16 +08:00
rootwrap.conf TrivialFix: Fix typo in the configuration file 2016-09-30 10:56:53 +07:00
setup.cfg introspection data backend: migration tool 2019-02-27 09:33:02 +08:00
setup.py Updated from global requirements 2017-03-02 11:45:30 +00:00
test-requirements.txt Add API reference 2018-10-16 16:50:01 +08:00
tox.ini Update UPPER_CONSTRAINTS_FILE for stable/stein 2019-03-20 14:49:40 +00:00

README.rst

Hardware introspection for OpenStack Bare Metal

Introduction

image

This is an auxiliary service for discovering hardware properties for a node managed by Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given its power management credentials (e.g. IPMI address, user name and password).

Note

ironic-inspector was called ironic-discoverd before version 2.0.0.

Release Notes

For information on any current or prior version, see the release notes.