Create plan for secure Ironic node console access

CCI-MOC / esi

Elastic Secure Infrastructure project

6 stars 12 forks source link

Create plan for secure Ironic node console access #547

Closed tzumainn closed 3 months ago

tzumainn commented 4 months ago

Nova has a secure solution; how much is adaptable to Ironic?

tzumainn commented 3 months ago

Nova has a serialconsoleproxy specifically used to work with baremetal instances. It's slightly too intertwined with Nova to be able to use out-of-the-box, but adapting it for our own purposes shouldn't be too bad. To summarize:

create serialconsoleproxy based on nova
deploy it, and update Ironic to only expose console on local ports

I'll create new issues for these.