xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2025-02-14 01:29:23 +00:00
Code Issues Projects Releases Wiki Activity

Specify the valid values for apiarmed

Browse Source 
Further, add more warning text around apiarmed, as it is a serious security
decision to take on continuous.
This commit is contained in:
Jarrod Johnson 2022-11-01 08:37:03 -04:00
parent e0feb104ff
commit 817038c6cf
1 changed files with 5 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

7
confluent_server/confluent/config/attributes.py
View File

@ -124,10 +124,13 @@ node = {
'deployment.apiarmed': {
'description': ('Indicates whether the node authentication token interface '
'is armed. If set to once, it will grant only the next '
'request. If set to continuous, will allow many requests.'
'Should not be set unless an OS deployment is pending. '
'request. If set to continuous, will allow many requests, '
'which greatly reduces security, particularly when connected to '
'untrusted networks. '
'Should not be set unless an OS deployment is pending on the node. '
'Generally this is not directly modified, but is modified '
'by the "nodedeploy" command'),
'validvalues': ('once', 'continuous', ''),
},
'deployment.sealedapikey': {
'description': 'This attribute is used by some images to save a sealed '