Files
1e73cba5cb30a06ca041bc33a5bf16d92f80e52f
ironic-python-agent /releasenotes
Julia Kreger a6ca65201a Lockout agent command results if a token is received
This is a second attempt at securing the get command output endpoint
which could have data such as logs which could potentially have
sensitive details and information after the agent has completed
one or more actions.
Now, if a token is receieved, the agent locks out the command results
endpoint, and requires all future calls to include it.
This allows for the agent to be backwards compatible.
Special thanks go to cid for his first attempt at this, which I took
for the basis of some of the testing required.
Closes-Bug: #2086866
Co-Authored-By: cid@gr-oss.io
Change-Id: Ia39a3894ef5efaffd7e1d22cc6244059a32175ff
2025年02月18日 06:32:48 -08:00
..
2024年11月29日 07:54:13 +00:00
2024年03月13日 19:40:40 +09:00