ironic-python-agent/releasenotes/notes/bandit-fixes-a971142075b29ca9.yaml
Julia Kreger 78c1343a54 Fix Bandit errors
Bandit 1.7.5 released with a timeout check for all requests and
urllib calls.

Fixed those.

In the process, then exposed a bandit b310 issue, which was already
covered by the code, but explicitly marked it as such.

Also, enables bandit checks to be voting for CI..

Change-Id: If0e87790191f5f3648366d571e1d85dd7393a548
2023-06-06 08:34:55 -07:00

18 lines
640 B
YAML

---
fixes:
- |
Fixes timeout declarations for Bandit 1.7.5 rule additions.
- |
Adds a new configuration option ``http_request_timeout``
to allow for operators to set the amount of time to wait
for a new request socket to wait. This helps prevent prevent
a possible hanged connection should the initial packets be
lost in tranist.
other:
- |
Adds a new configuration option ``http_request_timeout``
which is also accessible utilizing the kernel command line
option ``ipa-http-request-timeout``. This option helps prevent
failed connections from hanging the agent. The default is 30
seconds.