yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1223452] Re: TrustedFilter checks compute trust level, not hypervisors

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Alan Pevec <1223452@xxxxxxxxxxxxxxxxxx>
Date: Wed, 17 Jun 2015 18:06:37 -0000
Reply-to: Bug 1223452 <1223452@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Also affects: nova/icehouse
   Importance: Undecided
       Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1223452

Title:
  TrustedFilter checks compute trust level, not hypervisors

Status in OpenStack Compute (Nova):
  Fix Released
Status in OpenStack Compute (nova) icehouse series:
  New

Bug description:
  The TrustedFilter uses host_state.host as the name that will be
  checked against the remote attestation service.

  This works for the KVM case because the compute node and the
  hypervisor are the same; however we must be checking
  host_state.nodename which is the hostname for the hypervisor which
  will be registered with the attestation server.

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1223452/+subscriptions