diff options
| author | Julia Kreger <juliaashleykreger@gmail.com> | 2020-09-01 16:10:34 -0700 |
|---|---|---|
| committer | Julia Kreger <juliaashleykreger@gmail.com> | 2020-09-04 17:09:39 +0000 |
| commit | 5b272b0c46f5a10c50fc7325cc653fd577908ca0 (patch) | |
| tree | 7d8e3f3bb37c8610bcccad988e0215bb203adbd8 /devstack | |
| parent | 30d9cb47e62b62d570e1792515e16abf1ac3cd56 (diff) | |
| download | ironic-5b272b0c46f5a10c50fc7325cc653fd577908ca0.tar.gz | |
Remove token-less agent support
Removes the deprecated support for token-less agents which
better secures the ironic-python-agent<->ironic interactions
to help ensure heartbeat operations are coming from the same
node which originally checked-in with the Ironic and that
commands coming to an agent are originating from the same
ironic deployment which the agent checked-in with to begin
with.
Story: 2007025
Task: 40814
Change-Id: Id7a3f402285c654bc4665dcd45bd0730128bf9b0
Diffstat (limited to 'devstack')
| -rw-r--r-- | devstack/lib/ironic | 5 |
1 files changed, 0 insertions, 5 deletions
diff --git a/devstack/lib/ironic b/devstack/lib/ironic index 475f14e74..f3ff1eb00 100644 --- a/devstack/lib/ironic +++ b/devstack/lib/ironic @@ -550,9 +550,6 @@ IRONIC_DEPLOY_LOGS_LOCAL_PATH=${IRONIC_DEPLOY_LOGS_LOCAL_PATH:-$IRONIC_VM_LOG_DI # Fast track option IRONIC_DEPLOY_FAST_TRACK=${IRONIC_DEPLOY_FAST_TRACK:-False} -# Agent Token requirement -IRONIC_REQUIRE_AGENT_TOKEN=${IRONIC_REQUIRE_AGENT_TOKEN:-True} - # Define baremetal min_microversion in tempest config. Default value None is picked from tempest. TEMPEST_BAREMETAL_MIN_MICROVERSION=${TEMPEST_BAREMETAL_MIN_MICROVERSION:-} @@ -1423,8 +1420,6 @@ function configure_ironic { # Set fast track options iniset $IRONIC_CONF_FILE deploy fast_track $IRONIC_DEPLOY_FAST_TRACK - # Set requirement for agent tokens - iniset $IRONIC_CONF_FILE DEFAULT require_agent_token $IRONIC_REQUIRE_AGENT_TOKEN # No need to check if RabbitMQ is enabled, this call does it in a smart way if [[ "$IRONIC_RPC_TRANSPORT" == "oslo" ]]; then iniset_rpc_backend ironic $IRONIC_CONF_FILE |