openstack/ironic-inspector
Code Issues Proposed changes
Hardware introspection daemon for OpenStack Ironic
1,220 Commits 13 Branches 68 Tags 23 MiB
Python 96.3%
Shell 3.5%
198ef70c2b
Go to file
Pavlo Shchelokovskyy 198ef70c2b Add request context and policy enforcement 
this patch introduces an oslo.policy-based API access policy
enforcement engine to ironic-inspector.
As part of implementation, a proper oslo.context-based request
context is also generated and assigned to each request.

Short overview of changes:

- added custom RequestContext class

  - extends oslo.context to handle of "is_public_api" flag
    (False by default)

- added context to request in each API route

  - '/continue' api sets the "is_public_api" flag to True

- added documented definitions for API access policies and their
  defaults
- added enforcement of these policies on API requests
- added oslo.policy-specific entry points to setup.cfg
- added autogenerated policy sample file with defaults
- added documentation with autogenerated policies

Change-Id: Iff6f98fa9950d78608f0a7c325d132c11a1383b3
Closes-Bug: #1719812
2017-10-13 11:55:52 +00:00
devstack Remove SCREEN_LOGDIR from devstack 2017-10-06 08:38:15 +07:00
doc Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
ironic_inspector Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
releasenotes Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
rootwrap.d Use rootwrap to execute iptables instead of requiring root 2015-09-23 13:27:15 +02:00
tools Add fsm dot diagram generator 2017-03-01 14:46:28 +02:00
.gitignore Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
.gitreview Update .gitreview file for project rename 2015-06-12 23:12:30 +00:00
.stestr.conf Use ostestr unit test runner 2017-10-02 14:28:58 +00:00
babel.cfg Add scripts to manage translations 2015-03-04 00:07:37 +00:00
config-generator.conf Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
CONTRIBUTING.rst PXE filter options have no effect yet 2017-08-15 16:02:43 +02:00
example.conf Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
ironic-inspector.8 Final discoverd -> inspector rename/move pass 2015-06-15 15:34:00 +02:00
LICENSE Apache license 2014-10-03 17:15:55 +02:00
plugin-requirements.txt Store and expose introspection data 2015-08-27 20:18:54 -04:00
policy-generator.conf Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
policy.yaml.sample Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
README.rst Update the documentation link for doc migration 2017-08-03 14:29:06 +00:00
requirements.txt Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
rootwrap.conf TrivialFix: Fix typo in the configuration file 2016-09-30 10:56:53 +07:00
setup.cfg Add request context and policy enforcement 2017-10-13 11:55:52 +00:00
setup.py Updated from global requirements 2017-03-02 11:45:30 +00:00
test-requirements.txt Updated from global requirements 2017-10-05 18:51:25 +00:00
tox.ini Add request context and policy enforcement 2017-10-13 11:55:52 +00:00

README.rst

Hardware introspection for OpenStack Bare Metal

Introduction

image

This is an auxiliary service for discovering hardware properties for a node managed by Ironic. Hardware introspection or hardware properties discovery is a process of getting hardware parameters required for scheduling from a bare metal node, given it's power management credentials (e.g. IPMI address, user name and password).

Note

ironic-inspector was called ironic-discoverd before version 2.0.0.

Release Notes

For information on any current or prior version, see the release notes.