Today there are many places where compute and switch hosts are automatically powered on, either by NICo or BMC or other services, and is even sometimes an assumption for some workflows in NICo.
For hosts that were known to be leaking before previously turned off, and for hosts that belong to a previousl-known leaking rack, they should not be automatically turned on until their BMC or the whole rack's BMCs can give a definitive clearance of leakage.
Core already has a few such power-on gates, but many more are needed.
BMC configs need to be fully studied too.
Today there are many places where compute and switch hosts are automatically powered on, either by NICo or BMC or other services, and is even sometimes an assumption for some workflows in NICo.
For hosts that were known to be leaking before previously turned off, and for hosts that belong to a previousl-known leaking rack, they should not be automatically turned on until their BMC or the whole rack's BMCs can give a definitive clearance of leakage.
Core already has a few such power-on gates, but many more are needed.
BMC configs need to be fully studied too.