When a user allocates a machine, he can attach to machine while the metal-hammer is still installing the image, abort the installation process and do things with the machine through the PXE boot network. When allowing the access only after allocation success, the machine is in the user network, which is isolated from our internal infrastructure.
This can be achieved by providing a field in the metal-apiserver that can be checked before relaying.
When a user allocates a machine, he can attach to machine while the metal-hammer is still installing the image, abort the installation process and do things with the machine through the PXE boot network. When allowing the access only after allocation success, the machine is in the user network, which is isolated from our internal infrastructure.
This can be achieved by providing a field in the metal-apiserver that can be checked before relaying.