assisted installer follow-up #382
Conversation
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: dhellmann The full list of commands accepted by this bot can be found here.
Needs approval from an approver in each of these files:
Approvers can indicate their approval by writing |
|
@avishayt @romfreiman we should use this PR to answer the security question(s) from @ericavonb on #376 |
This is a follow-up change to openshift#376 with some placeholders for discussion items that were not resolved before the previous PR merged. Signed-off-by: Doug Hellmann <[email protected]>
dhellmann
force-pushed
the
assisted-installer-2
branch
from
fbf04e2 to
f6cd11c
Compare
| extra host (4 hosts to build a 3 node cluster, 6 hosts to build a 5 | ||
| node cluster, etc.). | ||
|
|
||
| There was a question about how the agent is secured: |
There was a problem hiding this comment.
will do once we have the whole story in place. we're currently discussing / designing it with SD & security teams.
Related, will there be any future mechanism to audit the server side generated code that runs inside my data center? ie: download 20 ignition files, block access to cloud.redhat.com, inspect ignition files, deliver to hosts out of band and still get a successful cluster? |
4 participants
This is a follow-up change to #376 with some placeholders for
discussion items that were not resolved before the previous PR merged.