Add metal-bmc configuration for allowed CIDRs. (#208)

metal-stack · Sep 5, 2023 · c7c5190 · c7c5190
1 parent e5b1efb
commit c7c5190
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 1 deletion.
diff --git a/partition/roles/metal-bmc/README.md b/partition/roles/metal-bmc/README.md
@@ -26,3 +26,5 @@ You can look up all the default values of this role [here](defaults/main.yaml).
 | metal_bmc_console_key        | yes       | The key for the metal-console port  as a string                                                       |
 | metal_bmc_console_cert_owner |           | user of the created certificate files                                                                 |
 | metal_bmc_console_cert_group |           | group of the created certificate files                                                                |
+| metal_bmc_ignore_macs        |           | when fetching bmc reports from the dhcp lease file, the given macs are ignored                        |
+| metal_bmc_allowed_cidrs      |           | when fetching bmc reports from the dhcp lease file, ips in the given cidrs are ignored                |
diff --git a/partition/roles/metal-bmc/defaults/main/main.yaml b/partition/roles/metal-bmc/defaults/main/main.yaml
@@ -1,10 +1,10 @@
 ---
 metal_bmc_ignore_macs: []
+metal_bmc_allowed_cidrs: []
 
 metal_bmc_bmc_superuser:
 metal_bmc_bmc_superuser_pwd:
 
-
 metal_bmc_nsq_log_level: info
 metal_bmc_nsq_tls_enabled: true
 metal_bmc_nsq_cert_dir: /certs/nsq

diff --git a/partition/roles/metal-bmc/tasks/main.yaml b/partition/roles/metal-bmc/tasks/main.yaml
@@ -88,6 +88,7 @@
       METAL_BMC_METAL_API_URL: "{{ metal_partition_metal_api_protocol }}://{{ metal_partition_metal_api_addr }}:{{ metal_partition_metal_api_port }}{{ metal_partition_metal_api_basepath }}"
       METAL_BMC_METAL_API_HMAC_KEY: "{{ metal_partition_metal_api_hmac_edit_key }}"
       METAL_BMC_IGNORE_MACS: "{{ metal_bmc_ignore_macs | join(',') }}"
+      METAL_BMC_ALLOWED_CIDRS: "{{ metal_bmc_allowed_cidrs | join(',') }}"
       METAL_BMC_IPMI_USER: "{{ metal_bmc_bmc_superuser }}"
       METAL_BMC_IPMI_PASSWORD: "{{ metal_bmc_bmc_superuser_pwd }}"
       METAL_BMC_MQ_ADDRESS: "{{ metal_bmc_nsq_lookupd_addr }}"