xCAT/confluent
2
0
Fork 0
mirror of https://github.com/xcat2/confluent.git synced 2025-01-15 12:17:47 +00:00
Code Issues Projects Releases Wiki Activity

Update attributes documentation

Browse Source
This commit is contained in:
Jarrod Johnson 2020-09-11 09:56:35 -04:00
parent 31d19e9398
commit c3d14977f2
1 changed files with 5 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
confluent_server/confluent/config/attributes.py
View File

@ -209,14 +209,14 @@ node = {
},
'deployment.useinsecureprotocols': {
'description': ('What phase(s) of boot are permitted to use insecure protocols '
'(TFTP and HTTP without TLS. By default, HTTPS is allowed. However '
'(TFTP and HTTP without TLS. By default, only HTTPS is used. However '
'this is not compatible with most firmware in most scenarios. Using '
'"firmware" as the setting will still use HTTPS after the initial download, '
'though be aware that a successful compromise during the firmware phase '
'though be aware that a successful attack during the firmware phase '
'will negate future TLS protections. The value "always" will result in '
'tftp/http being used for entire deployment. Note that ONIE does not '
'support secure protocols, and in that case this setting must be "always" '
'or "firmware"'),
'tftp/http being used for most of the deployment. The value "never" will '
'allow HTTPS only. Note that Ubuntu will still use HTTP without TLS for '
'a phase of the installation process.'),
'validlist': ('always', 'firmware', 'never'),
},
'discovery.passwordrules': {