405c7de1f8
Currently we keep DHCP always open for new nodes. This is an overkill, as we always know which nodes are on introspection. It also causes problems when not all node NIC's are registered in Ironic, as these NIC's might get DHCP from our server. This change reduces probability of wrong nodes accessing our DHCP by REJECT'ing all DHCP requests when no nodes are on introspection and node_not_found_hook is not set. It does not solve the problem completely: conflicts are still possible during the introspection. Change-Id: I7a50c02023ef4364e14825cd80fa75565fac3dc8 Partial-Bug: #1557979
8 lines
369 B
YAML
8 lines
369 B
YAML
---
|
|
fixes:
|
|
- DHCP is now disabled completely when no nodes are on introspection and
|
|
the "node_not_found_hook" is not set. This reduces probability of serving
|
|
DHCP to wrong nodes, if their NIC is not registered in Ironic. See
|
|
https://bugs.launchpad.net/ironic-inspector/+bug/1557979 and
|
|
https://bugzilla.redhat.com/show_bug.cgi?id=1317695 for details.
|