Nova API runs as privileged container
Bug #1649103 reported by
Pete Birley
This bug affects 2 people
| Affects | Status | Importance | Assigned to | Milestone | |
|---|---|---|---|---|---|
| kolla-kubernetes |
In Progress
|
Medium
|
Pete Birley | ||
Bug Description
The current implementation of kolla-k8s runs the Nova-API container in the Nova-API pod with elevated privileges, as a result of some unnecessary iptables commands run upon starting the Nova-Metadata API. This is not required when running in Kubernetes, and presents a potential security risk.
Revision history for this message
| Pete Birley (portdirect) wrote | #1 |
| Changed in kolla-kubernetes: | |
| importance: | Undecided → Medium |
| assignee: | nobody → Pete Birley (portdirect) |
| status: | New → In Progress |
To post a comment you must log in.
A potential solution to this issue is here: https:/