Ilker ManapandClaude Opus 5.5
e474fbcf16
GET /api/v1/bmc-hint answered with the BMC password to anyone with the agent token (public on the PXE command line) and a MAC (visible on the wire). It now returns the address and user only. When a machine reports in, the region matches its MACs against bmc_hints itself, seals the configured password into the record, and checks the BMC with a status call from the rack controller (verified_oob). The agent skips its own check when no password comes; old agents keep working. Co-Authored-By: Claude Opus 5.5 <noreply@anthropic.com>