1c281d8445
We discovered it was possible, when the agent was network booted, due to the model of "don't break existing users" coding, that it was possible for the script to consider a standing config drive as valid. This could result in configuration getting loaded from the configuration drive which is a security issue, but only for the networking portion of the configuration due to the use of glean instead of cloud-init. We since reverted out the default to have simple-init enabled, and this change fixes the load logic so we prevent these possible cases considering that ironic deployments using virtual media should now all be on code bases with the publisher ID value set. Change-Id: If2a63fd16d8ae8e71b61b39f7c0c87ff45a81cf0 Signed-off-by: Julia Kreger <juliaashleykreger@gmail.com>
Ironic Python Agent Builder
Tools and scripts to build a deployment, cleaning or inspection ramdisk based on Ironic Python Agent.
- Free software: Apache license
- Documentation: https://docs.openstack.org/ironic-python-agent-builder
- Source: https://opendev.org/openstack/ironic-python-agent-builder
- Bugs: https://bugs.launchpad.net/ironic-python-agent-builder
- Release Notes: https://docs.openstack.org/releasenotes/ironic-python-agent-builder/