Document a way to see masked fields in output
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Ironic |
Fix Released
|
Medium
|
Unassigned |
Bug Description
Right now ironic masks some fields in driver_info (ipmi_password) and in driver_
This is very clever and right, but occasionally operators need those fields to debug issues. For example, if server stopped to respond to IPMI commands it's obvious for operators to try those command manually, as well, as attempt to download image if failed to download, etc.
To get this masked information operators may use database queries (select driver_info from nodes where uuid='37522db5-
I propose to add some knob to specifically ask server not to mask those fields. Obviously it should be available only to administrators.
For CLI it may be something like 'ironic node-show node-name --unmask'.
It is controlled via policy as of now -- https:/ /github. com/openstack/ ironic/ blob/stable/ ocata/etc/ ironic/ policy. json.sample# L6, do you mean it completely on-demand?