dc0dad9773
This change adds a new policy setting, "show_instance_secrets", whose behavior mirrors that of the existing "show_passwords" policy setting. Whereas "show_passwords" has historically blocked all sensitive information from the node's driver_info field, the new setting blocks all sensitive information from the node's instance_info field, including image_url. The name of the old setting, "show_passwords", is not being changed at this time because such a change is not backwards-compatible. Instead, the documentation string for this setting has been changed to clarify what it does. Note that the behavior has not actually changed. Note that this change moves the policy.check("show_password") call from the Pecan hook into the API's Nodes() class, where the policy.check("show_instance_secrets") is also added. This makes the code a little cleaner and more maintainable, especially if we want to add any more checks like this in the future. As a result of this cleanup, the ironic-specific RequestContext.show_password property is removed. Partial-bug: #1530972 Partial-bug: #1526752 Related-bug: #1613903 Change-Id: I48493c53971cdab3b9122897e51322e19ce2f600 |
||
---|---|---|
api-ref | ||
devstack | ||
doc/source | ||
etc | ||
ironic | ||
ironic_tempest_plugin | ||
releasenotes | ||
tools | ||
.gitignore | ||
.gitreview | ||
.mailmap | ||
.testr.conf | ||
CONTRIBUTING.rst | ||
LICENSE | ||
README.rst | ||
RELEASE-NOTES | ||
Vagrantfile | ||
babel.cfg | ||
driver-requirements.txt | ||
requirements.txt | ||
setup.cfg | ||
setup.py | ||
test-requirements.txt | ||
tox.ini | ||
vagrant.yaml |
README.rst
Ironic
Ironic consists of an API and plug-ins for managing and provisioning physical machines in a security-aware and fault-tolerant manner. It can be used with nova as a hypervisor driver, or standalone service using bifrost. By default, it will use PXE and IPMI to interact with bare metal machines. Ironic also supports vendor-specific plug-ins which may implement additional functionality.
Ironic is distributed under the terms of the Apache License, Version 2.0. The full terms and conditions of this license are detailed in the LICENSE file.
Project resources
- Documentation: http://docs.openstack.org/developer/ironic
- Source: http://git.openstack.org/cgit/openstack/ironic
- Bugs: http://bugs.launchpad.net/ironic
- Wiki: https://wiki.openstack.org/wiki/Ironic
- APIs: http://developer.openstack.org/api-ref/baremetal/index.html
Project status, bugs, and requests for feature enhancements (RFEs) are tracked on Launchpad: http://launchpad.net/ironic
For information on how to contribute to ironic, see http://docs.openstack.org/developer/ironic/dev/code-contribution-guide.html