summaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorZuul <zuul@review.opendev.org>2023-02-13 20:46:07 +0000
committerGerrit Code Review <review@openstack.org>2023-02-13 20:46:07 +0000
commit514d4c6bd8b277f5c61493ed6916bfbc27eba593 (patch)
tree2133b1bf552744317f0a7c8b4a69de2b74410be0
parenta66208f24b021e08efe8c56bbaa6b760e9a15804 (diff)
parent6ea38a47c50e8f05b87bd9f3af1b54e5db9e4cf4 (diff)
downloadironic-514d4c6bd8b277f5c61493ed6916bfbc27eba593.tar.gz
Merge "[DOC] Set cleaning requirement with retirement"
-rw-r--r--doc/source/admin/retirement.rst21
1 files changed, 21 insertions, 0 deletions
diff --git a/doc/source/admin/retirement.rst b/doc/source/admin/retirement.rst
index e4884e0f4..aab307bac 100644
--- a/doc/source/admin/retirement.rst
+++ b/doc/source/admin/retirement.rst
@@ -23,6 +23,27 @@ scheduling of instances, but will still allow for other operations,
such as cleaning, to happen (this marks an important difference to
nodes which have the ``maintenance`` flag set).
+Requirements
+============
+
+The use of the retirement feature requires that automated cleaning
+be enabled. The default ``[conductor]automated_clean`` setting must
+not be disabled as the retirement feature is only engaged upon
+the completion of cleaning as it sets forth the expectation of removing
+sensitive data from a node.
+
+If you're uncomfortable with full cleaning, but want to make use of the
+the retirement feature, a compromise may be to explore use of metadata
+erasure, however this will leave additional data on disk which you may
+wish to erase completely. Please consult the configuration for the
+``[deploy]erase_devices_metadata_priority`` and
+``[deploy]erase_devices_priority`` settings, and do note that
+clean steps can be manually invoked through manual cleaning should you
+wish to trigger the ``erase_devices`` clean step to completely wipe
+all data from storage devices. Alternatively, automated cleaning can
+also be enabled on an individual node level using the
+``baremetal node set --automated-clean <node_id>`` command.
+
How to use
==========