Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Adam Young
From: Adam Young [ayo...@redhat.com] Sent: Wednesday, April 06, 2016 2:09 PM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [nova] Minimal secure identification of a new VM On 04/06/2016 05:42 AM, Daniel P. Berrange wrote: On Tue, Apr 05, 2016 at 06:00:55PM -0400

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Fox, Kevin M
From: Adam Young [ayo...@redhat.com] Sent: Wednesday, April 06, 2016 2:09 PM To: openstack-dev@lists.openstack.org Subject: Re: [openstack-dev] [nova] Minimal secure identification of a new VM On 04/06/2016 05:42 AM, Daniel P. Berrange wrote: > On Tue, Apr 05, 2

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Adam Young
On 04/06/2016 05:42 AM, Daniel P. Berrange wrote: On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam Young wrote: We have a use case where we want to register a newly spawned Virtual machine with an identity provider. Heat also has a need to provide some form of Identity for a new VM. Looking at

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Hayes, Graham
m: Daniel P. Berrange [berra...@redhat.com] > Sent: Wednesday, April 06, 2016 9:04 AM > To: Hayes, Graham > Cc: OpenStack Development Mailing List (not for usage questions) > Subject: Re: [openstack-dev] [nova] Minimal secure identification of a new VM > > On Wed, Apr 06, 2016 a

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Fox, Kevin M
Development Mailing List (not for usage questions) Subject: Re: [openstack-dev] [nova] Minimal secure identification of a new VM On Wed, Apr 06, 2016 at 04:03:18PM +, Hayes, Graham wrote: > On 06/04/2016 16:54, Gary Kotton wrote: > > > > > > On 4/6/16, 12:42 PM, "

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Hayes, Graham
On 06/04/2016 17:04, Daniel P. Berrange wrote: > On Wed, Apr 06, 2016 at 04:03:18PM +, Hayes, Graham wrote: >> On 06/04/2016 16:54, Gary Kotton wrote: >>> >>> >>> On 4/6/16, 12:42 PM, "Daniel P. Berrange" wrote: >>> On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Daniel P. Berrange
On Wed, Apr 06, 2016 at 04:03:18PM +, Hayes, Graham wrote: > On 06/04/2016 16:54, Gary Kotton wrote: > > > > > > On 4/6/16, 12:42 PM, "Daniel P. Berrange" wrote: > > > >> On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam Young wrote: > >>> We have a use case where we want to

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Hayes, Graham
On 06/04/2016 16:54, Gary Kotton wrote: > > > On 4/6/16, 12:42 PM, "Daniel P. Berrange" wrote: > >> On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam Young wrote: >>> We have a use case where we want to register a newly spawned Virtual >>> machine >>> with an identity provider.

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Fox, Kevin M
Nova Instance user spec. https://review.openstack.org/93 We really really need to solve this. it is affecting almost every project in one way or another. Can we please get a summit session dedicated to the topic? Last summit we had only 10 minutes. :/ Thanks, Kevin

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Gary Kotton
On 4/6/16, 12:42 PM, "Daniel P. Berrange" wrote: >On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam Young wrote: >> We have a use case where we want to register a newly spawned Virtual >>machine >> with an identity provider. >> >> Heat also has a need to provide some form of

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-06 Thread Daniel P. Berrange
On Tue, Apr 05, 2016 at 06:00:55PM -0400, Adam Young wrote: > We have a use case where we want to register a newly spawned Virtual machine > with an identity provider. > > Heat also has a need to provide some form of Identity for a new VM. > > > Looking at the set of utilities right now, there

Re: [openstack-dev] [nova] Minimal secure identification of a new VM

2016-04-05 Thread Joshua Harlow
Adam Young wrote: We have a use case where we want to register a newly spawned Virtual machine with an identity provider. Heat also has a need to provide some form of Identity for a new VM. Looking at the set of utilities right now, there does not seem to be a secure way to do this. Injecting