Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix FIPS handling #255

Merged
merged 5 commits into from Apr 11, 2022
Merged

fix FIPS handling #255

merged 5 commits into from Apr 11, 2022

Conversation

ahadas
Copy link
Member

@ahadas ahadas commented Apr 10, 2022

Now that we check the host FIPS mode (compared to the cluster's mode) in InitVdsOnUp, we need to take special care about the VDS object we check since InitVdsOnUp is called before persisting the data that is received by the host monitoring. So instead of passing the reported data to HandleVdsFips, it is simpler to inline HandleVdsFips into InitVdsOnUp - we have everything accessible there and we can reuse some existing code to set the non-operational mode, if needed.

Bug-Url: https://bugzilla.redhat.com/2065543

@ahadas
Copy link
Member Author

ahadas commented Apr 10, 2022

/ost

Copy link
Member

@liranr23 liranr23 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

the error we saw in OST was because the data saving happened after calling HandleVdsFips (which took it from getVds()) and wasn't updated?

@ahadas
Copy link
Member Author

ahadas commented Apr 11, 2022

the error we saw in OST was because the data saving happened after calling HandleVdsFips (which took it from getVds()) and wasn't updated?

I didn't get to the bottom of that - but this certainly didn't help

The idea behind using VdsEventListener is to propagate events at the
vdsbroker layer to the bll layer. Now that the trigger to initiate
HandleVdsFips is InitVdsOnUp, we no longer need it.

Signed-off-by: Arik Hadas <ahadas@redhat.com>
Signed-off-by: Arik Hadas <ahadas@redhat.com>
Now that we check the host FIPS mode (compared to the cluster's mode) in
InitVdsOnUp, we need to take special care about the VDS object we check
since InitVdsOnUp is called before persisting the data that is received
by the host monitoring. So instead of passing the reported data to
HandleVdsFips, it would be simpler to inline HandleVdsFips into
InitVdsOnUp - we have everything accessible there and we can reuse some
existing code to set the non-operational mode, if needed.

Bug-Url: https://bugzilla.redhat.com/2065543
Signed-off-by: Arik Hadas <ahadas@redhat.com>
Also do that before initialize the storage domains as checking the FIPS
mode compared to the cluster's mode is much simpler.

Signed-off-by: Arik Hadas <ahadas@redhat.com>
Copy link
Member

@mwperina mwperina left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

+1

@ahadas ahadas merged commit c70230a into oVirt:master Apr 11, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

4 participants