Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
26 changes: 19 additions & 7 deletions enhancements/installer/connected-assisted-installer.md
Original file line number Diff line number Diff line change
Expand Up @@ -184,6 +184,8 @@ the installer or to the cluster, so I can adapt my existing admin
processes and infrastructure management tools instead of replacing
them.

There was some question about whether this story was relevant.

#### Story 4

As a cluster hardware administrator, I want to enable power control
Expand All @@ -209,6 +211,16 @@ that approach cannot be supported, users can proceed by providing an
extra host (4 hosts to build a 3 node cluster, 6 hosts to build a 5
node cluster, etc.).

There was a question about how the agent is secured:

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

will do once we have the whole story in place. we're currently discussing / designing it with SD & security teams.


Could you add some specifics notes on the security for this design?
There are a lot of attack vectors in remote installation and auto-join
systems, but maybe there are details I’m missing that make this model
secure. Would be helpful to have them explicitly noted.

This part of the change should be replaced with those details, when
ready.

## Design Details

### Test Plan
Expand Down Expand Up @@ -307,13 +319,13 @@ The idea is to find the best form of an argument why this enhancement should _no

## Alternatives

The telco/edge bare metal team is working on support for automating
virtual media and dropping the need for a separate provisioning
network. Using the results will still require the user to understand
how to tell the installer the BMC type and credentials and to ensure
each host has an IP provided by an outside DHCP server. Hardware
support for automating virtual media is not consistent between
vendors.
The bare metal installer-provisioned infrastructure team is working on
support for automating virtual media and dropping the need for a
separate provisioning network. Using the results will still require
the user to understand how to tell the installer the BMC type and
credentials and to ensure each host has an IP provided by an outside
DHCP server. Hardware support for automating virtual media is not
consistent between vendors.

## Infrastructure Needed [optional]

Expand Down