diff options
author | Zuul <zuul@review.opendev.org> | 2023-02-13 20:46:07 +0000 |
---|---|---|
committer | Gerrit Code Review <review@openstack.org> | 2023-02-13 20:46:07 +0000 |
commit | 514d4c6bd8b277f5c61493ed6916bfbc27eba593 (patch) | |
tree | 2133b1bf552744317f0a7c8b4a69de2b74410be0 /doc/source/admin | |
parent | a66208f24b021e08efe8c56bbaa6b760e9a15804 (diff) | |
parent | 6ea38a47c50e8f05b87bd9f3af1b54e5db9e4cf4 (diff) | |
download | ironic-514d4c6bd8b277f5c61493ed6916bfbc27eba593.tar.gz |
Merge "[DOC] Set cleaning requirement with retirement"
Diffstat (limited to 'doc/source/admin')
-rw-r--r-- | doc/source/admin/retirement.rst | 21 |
1 files changed, 21 insertions, 0 deletions
diff --git a/doc/source/admin/retirement.rst b/doc/source/admin/retirement.rst index e4884e0f4..aab307bac 100644 --- a/doc/source/admin/retirement.rst +++ b/doc/source/admin/retirement.rst @@ -23,6 +23,27 @@ scheduling of instances, but will still allow for other operations, such as cleaning, to happen (this marks an important difference to nodes which have the ``maintenance`` flag set). +Requirements +============ + +The use of the retirement feature requires that automated cleaning +be enabled. The default ``[conductor]automated_clean`` setting must +not be disabled as the retirement feature is only engaged upon +the completion of cleaning as it sets forth the expectation of removing +sensitive data from a node. + +If you're uncomfortable with full cleaning, but want to make use of the +the retirement feature, a compromise may be to explore use of metadata +erasure, however this will leave additional data on disk which you may +wish to erase completely. Please consult the configuration for the +``[deploy]erase_devices_metadata_priority`` and +``[deploy]erase_devices_priority`` settings, and do note that +clean steps can be manually invoked through manual cleaning should you +wish to trigger the ``erase_devices`` clean step to completely wipe +all data from storage devices. Alternatively, automated cleaning can +also be enabled on an individual node level using the +``baremetal node set --automated-clean <node_id>`` command. + How to use ========== |