ravening commented on pull request #4228: URL: https://github.com/apache/cloudstack/pull/4228#issuecomment-668011597
> @ravening this will break the host-add feature for a lot of users who use the functionality to add a KVM host out-of-band without using the addHost API. > > Instead a middle-ground fix could be to remove a host's certificates when a KVM host is removed (all the /etc/cloudstack/agent/cloud.* files) which will stop KVM agent connections to be accepted by the management server for most deployments (i.e. CA plugin and auth strictness enabled). @rhtyd this will work only if CA plugin and auth strictness is enabled but what if we have not configured both in some setup. In that case, the host will still be added ---------------------------------------------------------------- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. For queries about this service, please contact Infrastructure at: [email protected]
