[Ironic] Teaching virtualbmc how to talk to Ironic?

Lars Kellogg-Stedman lars at redhat.com
Tue Oct 20 18:40:50 UTC 2020


On Sun, Oct 18, 2020 at 08:52:20PM -0700, Dan Sneddon wrote:
> Redfish requires user accounts. Is there a way to stretch this idea into a
> more general Redfish proxy? Ironic would have to create a temporary user
> account for Redfish in the BMC, and then provide the tenant an IP:port of a
> TCP proxy for the tenant to connect to.

We really want to have more control over the actions to which someone
who has acquired a piece of hardware has access (so a simple TCP proxy
probably isn't what we're after, although I would have to do a little
more research into what sort of access limitations we can apply to
Redfish users on something like an iDRAC).

That said, we're not tied to IPMI if we find that things these days
typically have good support for Redfish, and some sort of API proxy
for Redfish would be a fine alternative to virtual IPMI instance.

-- 
Lars Kellogg-Stedman <lars at redhat.com> | larsks @ {irc,twitter,github}
http://blog.oddbit.com/                | N1LKS




More information about the openstack-discuss mailing list