diff options
author | Tim Smith <tsmith84@gmail.com> | 2016-05-11 08:19:05 -0700 |
---|---|---|
committer | Tim Smith <tsmith@chef.io> | 2017-02-23 12:58:57 -0800 |
commit | 3fb10507250b65f83166e1b9e67b755557c66377 (patch) | |
tree | 0fbdb5cc83665483089782e95d62db10c2d44475 | |
parent | 708854dbd35e05f2723a11731ac1b52bbd34f967 (diff) | |
download | ohai-3fb10507250b65f83166e1b9e67b755557c66377.tar.gz |
Exclude vendor data and don't depend on the network plugin
The network plugin is leftover from the old method where we looked up the interfaces based on the IP in the hint. We don't do that anymore so this isn't necessary.
Vendor data can include sensitive bootstrapping information that we shouldn't save to the node. It also doesn't include anything of value so either way the data shouldn't be on the node
-rw-r--r-- | lib/ohai/plugins/digital_ocean.rb | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/lib/ohai/plugins/digital_ocean.rb b/lib/ohai/plugins/digital_ocean.rb index eaabfb7d..08daa600 100644 --- a/lib/ohai/plugins/digital_ocean.rb +++ b/lib/ohai/plugins/digital_ocean.rb @@ -22,7 +22,6 @@ Ohai.plugin(:DigitalOcean) do provides "digital_ocean" - depends "network/interfaces" depends "dmi" # look for digitalocean string in dmi bios data @@ -53,6 +52,7 @@ Ohai.plugin(:DigitalOcean) do Ohai::Log.debug("Plugin Digitalocean: looks_like_digital_ocean? == true") digital_ocean Mash.new fetch_metadata.each do |k, v| + next if k == 'vendor_data' # this may have sensitive data we shouldn't store digital_ocean[k] = v end else |