Document a way to see masked fields in output

Bug #1669331 reported by George Shuklin
8
This bug affects 1 person
Affects Status Importance Assigned to Milestone
Ironic
Triaged
Medium
Unassigned

Bug Description

Right now ironic masks some fields in driver_info (ipmi_password) and in driver_internal_info (config_drive, image_url), etc.

This is very clever and right, but occasionally operators need those fields to debug issues. For example, if server stopped to respond to IPMI commands it's obvious for operators to try those command manually, as well, as attempt to download image if failed to download, etc.

To get this masked information operators may use database queries (select driver_info from nodes where uuid='37522db5-298c-41c4-9e6b-88382698a843';) but this is rather tedious and dangerous.

I propose to add some knob to specifically ask server not to mask those fields. Obviously it should be available only to administrators.

For CLI it may be something like 'ironic node-show node-name --unmask'.

Revision history for this message
Vladyslav Drok (vdrok) wrote :

It is controlled via policy as of now -- https://github.com/openstack/ironic/blob/stable/ocata/etc/ironic/policy.json.sample#L6, do you mean it completely on-demand?

tags: added: rfe
Revision history for this message
Vladyslav Drok (vdrok) wrote :

err, s/do you mean it/do you mean you want it to be/

Revision history for this message
George Shuklin (george-shuklin) wrote :

Oh, cool. I didn't know it can be controlled by policy.

In this case,please, threat this bug as rfe for documentation.

Revision history for this message
Vladyslav Drok (vdrok) wrote :

I'm making it a usual bug then, thanks!

tags: added: low-hanging-fruit
removed: rfe
tags: added: documentation
summary: - [RFE] Give operators a way to see masked fields in output
+ Give operators a way to see masked fields in output
summary: - Give operators a way to see masked fields in output
+ Document a way to see masked fields in output
Changed in ironic:
status: New → Triaged
importance: Undecided → Medium
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.