ironic/releasenotes/notes/node-credentials-cleaning-b1903f49ffeba029.yaml
Dmitry Tantsur c2185469c4 Do not pass credentials to the ramdisk on cleaning
Currently the driver_info is passed as is to the ramdisk when calling
get_clean_steps or execute_clean_step. This may lead to their exposure,
as ironic<->ramdisk communication is currently not secure.

This change applies the same logic we use in the API to filter
the fields.

Change-Id: I4fd44786fea6c7092d2b0029cea6d680d31babde
Closes-Bug: #1744836
2018-02-07 12:22:26 +01:00

6 lines
174 B
YAML

---
security:
- |
Sensitive information is now removed from a node's ``driver_info`` and
``instance_info`` fields before sending it to the ramdisk during cleaning.