Uploaded image for project: 'OpenShift Bugs'
  1. OpenShift Bugs
  2. OCPBUGS-8511

[4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

    XMLWordPrintable

Details

    • Moderate
    • No
    • 1
    • Metal Platform 233
    • 1
    • False
    • Hide

      None

      Show
      None
    • Hide
      * Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link:https://issues.redhat.com/browse/OCPBUGS-8511[*OCPBUGS-8511*])
      Show
      * Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link: https://issues.redhat.com/browse/OCPBUGS-8511 [* OCPBUGS-8511 *])
    • Bug Fix
    • Done

    Description

      Description of problem:

      A customer is raising security concerns about using port 80 for bootstrap

      Version-Release number of selected component (if applicable):

      4.13

      RFE-3577

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-8509 [4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          depends on

          Bug - A problem that impairs or prevents the functions of the product. OCPBUGS-8509 [4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

          • Normal - To be worked after urgent and high priorities are resolved. This term is chosen when the severity of an issue is relatively close to the level of effort to fix it. The existence of an easily implemented workaround can also lead to this priority level instead of a higher priority.
          • Closed
          links to

          GitHub openshift/installer#7022: [release-4.13] OCPBUGS-8511: baremetal: do not use port 80 for httpd

          Activity

            People

              dfitzmau@redhat.com Darragh Fitzmaurice
              racedoro@redhat.com Ramon Acedo
              Jad Haj Yahya Jad Haj Yahya
              Votes:
              0 Vote for this issue
              Watchers:
              5 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: