2015-12-16 11:35:11 |
Vladyslav Drok |
description |
Currently, Ironic stores unencrypted credentials of all nodes in its database,
which is insecure, because if one gains access to database, (s)he will also
have access to all the baremetal nodes. Credentials should be encrypted or this
task should be delegated to another service so that database
operator/administrator is not able to read them, thus enhancing security. |
Currently, Ironic stores unencrypted credentials of all nodes in its database, which is insecure, because if one gains access to database, (s)he will also have access to all the baremetal nodes. Credentials should be encrypted or this task should be delegated to another service so that database operator/administrator is not able to read them, thus enhancing security. |
|