openstack
/
instack-undercloud
Code Issues Proposed changes

Use the new dnsmasq PXE filter in ironic-inspector 

With the introduction of rotued networks there can be
a situation where baremetal nodes on remote segments
are unintentionally introspected. Using the dnsmasq
based PXE filtering driver in ironic inspector fixes
the issue.

Co-Authored-By: Harald Jensås <hjensas@redhat.com>
Closes-Bug: #1756075
Change-Id: I53d6c5718c7f9112d578ec6f73830830d2c71737
Depends-On: I056cdadc025f35d8b6fd22f510a7c0a8e259a1f0
This commit is contained in:
Dmitry Tantsur 2017-11-29 18:32:17 +01:00 committed by Harald Jensås
parent 41f2694d13
commit 5e1a4d9f0b
3 changed files with 7 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
elements/puppet-stack-config/puppet-stack-config.pp
View File

@ -521,6 +521,8 @@ include ::ironic::drivers::staging
include ::ironic::glance
include ::ironic::inspector
include ::ironic::inspector::cors
include ::ironic::inspector::pxe_filter
include ::ironic::inspector::pxe_filter::dnsmasq
include ::ironic::neutron
include ::ironic::pxe
include ::ironic::service_catalog

2
elements/puppet-stack-config/puppet-stack-config.yaml.template
View File

@ -584,6 +584,8 @@ ironic::inspector::swift_auth_url: "%{hiera('keystone_auth_uri')}"
ironic::inspector::dnsmasq_local_ip: {{LOCAL_IP}}
ironic::inspector::dnsmasq_interface: {{INSPECTION_INTERFACE}}
ironic::inspector::dnsmasq_ip_subnets: {{{INSPECTION_SUBNETS}}}
ironic::inspector::pxe_filter::driver: dnsmasq
ironic::inspector::dnsmasq_dhcp_hostsdir: '/var/lib/ironic-inspector/dhcp-hostsdir'
ironic::inspector::ramdisk_collectors: {{INSPECTION_COLLECTORS}}
ironic::inspector::additional_processing_hooks: 'extra_hardware,lldp_basic,local_link_connection'
ironic::inspector::ramdisk_kernel_args: {{INSPECTION_KERNEL_ARGS}}

3
releasenotes/notes/ironic-inspector-use-pxe-filter-dnsmasq-611a69bc12011989.yaml Normal file
View File

@ -0,0 +1,3 @@
---
fixes:
- Using the ``dnsmasq`` PXE filter for inspection fixes bug #1756075.