nova/releasenotes/notes/imageRef-as-uuid-only-0164c04206a42683.yaml
ghanshyam cbd3ec476f Strict ImageRef validation to UUID only
Currently imageRef in server create, rebuild and rescue
operation can be accepted as random url which contains image
UUID and fetch the UUID from that.

As /images proxy APIs are deprecated, and ImageRef in
server creation etc are UUID only and valid against glance.

This patch makes imageRef handling as UUID only and
return 400 if non UUID are requested.

NOTE- Previously nova use to allow the empty string which was
      ok in case of boot from volume.
      We will keep the same behavior of allowing empty string in case of
      boot from volume only and 400 in all other case.

Closes-Bug: #1607229

Change-Id: I49f4da62c1b5b3fd8c5f67039ae113f76722b26c
2016-08-04 02:22:15 +00:00

18 lines
677 B
YAML

---
upgrade:
- imageRef input to the REST API is now restricted
to be UUID or an empty string only. imageRef
input while create, rebuild and rescue server etc
must be a valid UUID now. Previously, a random
image ref url containing image UUID was accepted.
But now all the reference of imageRef must be a
valid UUID (with below exception) otherwise API
will return 400.
Exception- In case boot server from volume.
Previously empty string was allowed in imageRef
and which is ok in case of boot from volume.
Nova will keep the same behavior and allow empty
string in case of boot from volume only and 400
in all other case.