yahoo-eng-team team mailing list archive

Thread
Date

[Bug 1480813] Re: How can tenant vm instance access management network

To: yahoo-eng-team@xxxxxxxxxxxxxxxxxxx
From: Gary Kotton <1480813@xxxxxxxxxxxxxxxxxx>
Date: Tue, 17 Nov 2015 13:58:32 -0000
Reply-to: Bug 1480813 <1480813@xxxxxxxxxxxxxxxxxx>
Sender: bounces@xxxxxxxxxxxxx

** Changed in: neutron
       Status: New => Invalid

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to neutron.
https://bugs.launchpad.net/bugs/1480813

Title:
  How can tenant vm instance access management network

Status in neutron:
  Invalid

Bug description:
  Hi team,

  Now we use monasca as a monitroing solution for our public cloud
  product. But we encounter a network issue that is we wonder setup
  agent program in user's vm instance, monasca agent need access
  keystone for authentication. We thought of two methods:

  1.Create a virtual nic on vm instance and access the keystone through the management network.
  2.Through L3 router to external network and expose keystone api on external network.

  Seems these two methods both have security issue.

  I want to know which solution is prefered and how to avoid security issue. 
  Thank you.

To manage notifications about this bug go to:
https://bugs.launchpad.net/neutron/+bug/1480813/+subscriptions