Loading...

XML

Word

Printable

Severity:
Moderate
Regression:
No
Story Points:
1
Sprint:
Metal Platform 233
sprint_count:
1
Blocked:
False
Blocked Reason:

Hide

None

Show
None
Release Note Text:

Hide
* Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link:https://issues.redhat.com/browse/OCPBUGS-8511[*~~OCPBUGS-8511~~*])

Show
* Previously, the bare metal installer-provisioned infrastrature used port 80 for providing images to the Baseboard Management Controller (BMC) and the deployment agent. Security risks could exist with port 80, because this port is commonly chosen for internet communcations. The bare metal installer-provisioned infrastrature now used port 6180 for serving images that are used by the `metal3` pod on deployed clusters. (link: https://issues.redhat.com/browse/OCPBUGS-8511 [* OCPBUGS-8511 *])
Release Note Type:
Bug Fix
Release Note Status:
Done
Target Version:

4.13.0

Description of problem:

A customer is raising security concerns about using port 80 for bootstrap

Version-Release number of selected component (if applicable):

4.13

clones

OCPBUGS-8509 [4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

depends on

OCPBUGS-8509 [4.13+ ONLY] Don't use port 80 in bootstrap IPI bare metal

links to