Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-8511

[4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

XMLWordPrintable

    • Quality / Stability / Reliability
    • False
    • Hide

      None

      Show
      None
    • 1
    • Moderate
    • No
    • None
    • None
    • Metal Platform 233
    • 1
    • Done
    • Bug Fix
    • Hide
      * Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link:https://issues.redhat.com/browse/OCPBUGS-8511[*OCPBUGS-8511*])
      Show
      * Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link: https://issues.redhat.com/browse/OCPBUGS-8511 [* OCPBUGS-8511 *])
    • None
    • None
    • None
    • None

      Description of problem:

      A customer is raising security concerns about using port 80 for bootstrap

      Version-Release number of selected component (if applicable):

      4.13

      RFE-3577

              dfitzmau@redhat.com Darragh Fitzmaurice
              racedoro@redhat.com Ramon Acedo
              None
              None
              Jad Haj Yahya Jad Haj Yahya
              None
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

                Created:
                Updated:
                Resolved: