2
0
mirror of https://gitlab.isc.org/isc-projects/kea synced 2025-08-30 13:37:55 +00:00

[#3916] add warning on CA startup as being deprecated

This commit is contained in:
Razvan Becheriu
2025-05-30 21:20:22 +03:00
parent d85666cf22
commit a30d2fe077
8 changed files with 18 additions and 9 deletions

View File

@@ -39,9 +39,9 @@ The CA processes received commands according to the following algorithm:
.. note::
The CA will be deprecated by a future Kea release: its function has
been moved to Kea servers since release 2.7.2, see the section about
migration from CA (:ref:`ctrl-channel-migration`).
The CA is deprecated: its function has been moved to Kea servers since
release 2.7.2, see the section about migration from CA
(:ref:`ctrl-channel-migration`).
.. _agent-configuration:

View File

@@ -1,4 +1,4 @@
// File created from src/bin/agent/ca_messages.mes
// File created from ../src/bin/agent/ca_messages.mes
#include <cstddef>
#include <log/message_types.h>
@@ -21,6 +21,7 @@ extern const isc::log::MessageID CTRL_AGENT_HTTPS_SERVICE_UPDATED = "CTRL_AGENT_
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED = "CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED";
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_STARTED = "CTRL_AGENT_HTTP_SERVICE_STARTED";
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_UPDATED = "CTRL_AGENT_HTTP_SERVICE_UPDATED";
extern const isc::log::MessageID CTRL_AGENT_IS_DEPRECATED = "CTRL_AGENT_IS_DEPRECATED";
extern const isc::log::MessageID CTRL_AGENT_RUN_EXIT = "CTRL_AGENT_RUN_EXIT";
extern const isc::log::MessageID CTRL_AGENT_SECURITY_CHECKS_DISABLED = "CTRL_AGENT_SECURITY_CHECKS_DISABLED";
extern const isc::log::MessageID CTRL_AGENT_STARTED = "CTRL_AGENT_STARTED";
@@ -45,6 +46,7 @@ const char* values[] = {
"CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED", "failed to reused HTTP service bound to address: %1 port: %2",
"CTRL_AGENT_HTTP_SERVICE_STARTED", "HTTP service bound to address: %1 port: %2",
"CTRL_AGENT_HTTP_SERVICE_UPDATED", "reused HTTP service bound to address: %1 port: %2",
"CTRL_AGENT_IS_DEPRECATED", "Kea Control Agent is deprecated. Its function has been moved to Kea servers.",
"CTRL_AGENT_RUN_EXIT", "application is exiting the event loop",
"CTRL_AGENT_SECURITY_CHECKS_DISABLED", "Invoked with command line option -X, Security checks are disabled!!",
"CTRL_AGENT_STARTED", "Kea Control Agent version %1 started",

View File

@@ -1,4 +1,4 @@
// File created from src/bin/agent/ca_messages.mes
// File created from ../src/bin/agent/ca_messages.mes
#ifndef CA_MESSAGES_H
#define CA_MESSAGES_H
@@ -22,6 +22,7 @@ extern const isc::log::MessageID CTRL_AGENT_HTTPS_SERVICE_UPDATED;
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_REUSE_FAILED;
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_STARTED;
extern const isc::log::MessageID CTRL_AGENT_HTTP_SERVICE_UPDATED;
extern const isc::log::MessageID CTRL_AGENT_IS_DEPRECATED;
extern const isc::log::MessageID CTRL_AGENT_RUN_EXIT;
extern const isc::log::MessageID CTRL_AGENT_SECURITY_CHECKS_DISABLED;
extern const isc::log::MessageID CTRL_AGENT_STARTED;

View File

@@ -82,9 +82,13 @@ This informational message indicates that the Control Agent has
processed all configuration information and is ready to begin processing.
The version is also printed.
% CTRL_AGENT_IS_DEPRECATED Kea Control Agent is deprecated. Its function has been moved to Kea servers.
This warning message indicates that the Control Agent has been deprecated.
All its function has been moved to Kea servers.
% CTRL_AGENT_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
This warning is emitted when internal security checks normally
performed by kea-ctrl-agent have been disabled via command line opion '-X'.
performed by kea-ctrl-agent have been disabled via command line option '-X'.
This means the server is not enforcing restrictions on resource
paths or permissions. This mode of operation may expose your
environment to security vulnerabilities and should only be used

View File

@@ -44,6 +44,8 @@ void
CtrlAgentProcess::run() {
LOG_INFO(agent_logger, CTRL_AGENT_STARTED).arg(VERSION);
LOG_WARN(agent_logger, CTRL_AGENT_IS_DEPRECATED);
if (!PathChecker::shouldEnforceSecurity()) {
LOG_WARN(agent_logger, CTRL_AGENT_SECURITY_CHECKS_DISABLED);
}

View File

@@ -1185,7 +1185,7 @@ expected: the erroneous response is dropped, the discover query is displayed.
% DHCP4_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
This warning is emitted when internal security checks normally
performed by kea-dhcp4 have been disabled via command line opion '-X'.
performed by kea-dhcp4 have been disabled via command line option '-X'.
This means the server is not enforcing restrictions on resource
paths or permissions. This mode of operation may expose your
environment to security vulnerabilities and should only be used

View File

@@ -1162,7 +1162,7 @@ new server id.
% DHCP6_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
This warning is emitted when internal security checks normally
performed by kea-dhcp6 have been disabled via command line opion '-X'.
performed by kea-dhcp6 have been disabled via command line option '-X'.
This means the server is not enforcing restrictions on resource
paths or permissions. This mode of operation may expose your
environment to security vulnerabilities and should only be used

View File

@@ -450,7 +450,7 @@ response from a DNS server.
% DHCP_DDNS_SECURITY_CHECKS_DISABLED Invoked with command line option -X, Security checks are disabled!!
This warning is emitted when internal security checks normally
performed by kea-dhcp-ddns have been disabled via command line opion '-X'.
performed by kea-dhcp-ddns have been disabled via command line option '-X'.
This means the server is not enforcing restrictions on resource
paths or permissions. This mode of operation may expose your
environment to security vulnerabilities and should only be used