~troyanov/maas:backport-token-leak-3.2

Branch merges

Propose for merging

Merged into maas:3.2

MAAS Lander: Approve on 2022-11-09

Alberto Donato (community): Approve on 2022-11-09

Diff: 159 lines (+36/-25)

3 files modified

src/metadataserver/templates/hardware_sync_service.template (+0/-5)
src/metadataserver/tests/test_vendor_data.py (+17/-3)
src/metadataserver/vendor_data.py (+19/-17)

api

Related source package recipes

No recipes using this branch. (?)

Create packaging recipe

Related snap packages

Related charm recipes

199024b... by Anton Troyanov on 2022-11-02

fix(security): maas_hardware_sync credentials leak

Resolves LP:1993032

(cherry picked from commit 0b9a9d8421d301569af12cc8127f440d68914a0a)

5c0b797... by Alberto Donato on 2022-10-19

LP:1992185 look at all children to find the VM host address

backport of 93cf8e966

0733496... by Alberto Donato on 2022-10-18

LP:1993289 set a string for the storage pool path even if unknown

backport of (48ded3aa2)

0cb3744... by Alberto Donato on 2022-10-17

LP:1988759 allow null config from storage pools (backport 9b23293a6)

This also reverts change to make certificate unrestricted on deployed host

6840893... by Alberto Donato on 2022-10-14

LP:1988759 don't restrict LXD credentials to the maas project on LXD deploy

This causes MAAS not to be able to read storage volumes and networks from LXD

(backport of 95c09efaf)

d59c6b7... by Alberto Donato on 2022-10-11

add back the _size_human fields for websocket storage

218b403... by Alberto Donato on 2022-10-11

LP:1938296 subtract partition table space from available disk space (backport 0309f0115)

This is done even if the partition table doesn't exist to ensure creating a partition of the whole available space doesn't fail
Additionally, drop the unused "human_size" params in websocket handler.

985f3e8... by Alexsander de Souza on 2022-10-06

set TMPDIR when commissioning controllers

the /tmp directory cannot be used on CIS-hardened hosts

fixes LP1989974

(cherry picked from commit 91f6aef1e0b3a2e744fb6701f211b810d63afe3b)

d527f27... by Anton Troyanov on 2022-10-04

LP:1990014 fix debug middleware

When response jas no `content` attribute, default value will be
returned.

Default value should be of type `bytes`, not `str`, otherwise it will
fail to decode with an exception:

```
AttributeError: 'str' object has no attribute 'decode'.
```

From Django documentation:
  HttpResponse.content
  A bytestring representing the content, encoded from a string if necessary.

(cherry picked from commit e9587d9158ba3e4cfe8681413e7ce85ce16027af)

7c08684... by Christian Grabowski on 2022-09-23

use BootResource's method for splitting base image to get a default value in get_boot_config_for_machine()