openstack/ironic
Code Issues Proposed changes

CI: Fix anaconda job post OSSA-2025-001

Browse Source 
Turns out some of the standalone jobs, anaconda in particular,
can reference some artifacts on disk in such a way which causes
the security logic to block the request. This is an easy fix.

Change-Id: I79204117cdbffab1f619981767471475870b4571
(cherry picked from commit 42be33b52b)
This commit is contained in:
Julia Kreger
2025-05-12 10:17:05 -07:00
parent 0506aae0c8
commit 73d364fb8c
1 changed files with 3 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

3
devstack/lib/ironic
View File

@@ -1810,6 +1810,9 @@ cgroup_device_acl = [
EOF
restart_libvirt
fi
# Standalone jobs may use some different paths, that is okay
iniset $IRONIC_CONF_FILE conductor file_url_allowed_paths /var/lib/ironic,/shared/html,/templates,/opt/cache/files,/vagrant,/opt/stack/ironic
fi
if [[ "$IRONIC_IS_HARDWARE" == "False" ]]; then