search

hep-gc / cloud-scheduler

Automatically boot VMs for your HTC jobs
http://cloudscheduler.org
Apache License 2.0
3 stars 0 forks source link

Cloud Scheduler shouldn't store secret credentials in metadata service #460

Open rptaylor opened 7 years ago

rptaylor commented 7 years ago

The metadata service is not secure: https://wiki.openstack.org/wiki/OSSN/OSSN-0074

Not sure what alternatives can be used though?

mhpx commented 7 years ago

We'd have to go back to hard coding things into the image and have the images be private.

mhpx commented 7 years ago

seems http://docs.openstack.org/user-guide/cli-config-drive.html is a suggested solution, or the cloud itself needs a proxy in front of the metadata server to filter the malicious requests