compute-trust.json provides invalid data for trust filter
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
Glance |
Fix Released
|
Medium
|
Kamil Rykowski |
Bug Description
compute-trust.json provides such properties for trust filter:
"properties": {
"trust:
"title": "Intel® TXT attestation",
"description": "Select to ensure that node has been attested by Intel® Trusted Execution Technology (Intel® TXT).",
"type": "boolean"
}
}
This means that actually we require True/False values for trust levels. This does not match with how Trust Filter works (comment from trust filter):
Filter that only schedules tasks on a host if the integrity (trust)
of that host matches the trust requested in the ``extra_specs`` for the
flavor. The ``extra_specs`` will contain a key/value pair where the
key is ``trust``. The value of this pair (``trusted`
match the integrity of that host (obtained from the Attestation
service) before the task can be scheduled on that host.
There is also level 'unknown' available:
def _init_cache_
This means that compute-trust.json should be changed to match trust levels that are expected by Trust Filter.
Changed in glance: | |
assignee: | nobody → Pawel Koniszewski (pawel-koniszewski) |
tags: | added: metadef |
Changed in glance: | |
assignee: | Pawel Koniszewski (pawel-koniszewski) → Kamil Rykowski (kamil-rykowski) |
Changed in glance: | |
milestone: | none → juno-rc2 |
Changed in glance: | |
importance: | Undecided → Medium |
Changed in glance: | |
status: | Fix Committed → Fix Released |
Changed in glance: | |
milestone: | juno-rc2 → 2014.2 |
Fix proposed to branch: master /review. openstack. org/121587
Review: https:/