<html><head></head><body style="word-wrap: break-word; -webkit-nbsp-mode: space; -webkit-line-break: after-white-space; color: rgb(0, 0, 0); font-size: 14px; font-family: Calibri, sans-serif;"><div>Greetings,</div><div><br></div><div>I am trying to address an issue from certain perspectives and I think some support from Nova may be needed.</div><div><br></div><div><u>Problem</u></div><div>Services like Trove use run in Nova Compute Instances. These Services try to provide an integrated and stable platform for which the “service” can run in a predictable manner. Such elements include configuration of the service, networking, installed packages, etc. In today’s world, when Trove spins up an Instance to deploy a database on, it creates that Instance with the Users Credentials. Thus, to Nova, the User has full access to that Instance through Nova’s API. This access can be used in ways which unintentionally compromise the service.</div><div><br></div><div><u>Solution</u></div><div>A proposal is being formed that would put such Instances in a read-only or invisible mode from the perspective of Nova. That is, the Instance can only be managed from the Service from which it was created. At this point, we do not need any granular controls. A simple lock-down of the Nova API for these Instances would suffice. However, Trove would still need to interact with this Instance via Nova API.</div><div><br></div><div>The basic requirements for Nova would be…</div><div><br></div><blockquote style="margin:0 0 0 40px; border:none; padding:0px;"><div>A way to identify a request originating from a Service vs coming directly from an end-user</div><div>A way to Identify which instances are being managed by a Service</div><div>A way to prevent some or all access to the Instance unless the Service ID in the request matches that attached to the Instance</div><div><br></div></blockquote><div>Any feedback on this would be appreciated.</div><div><br></div><div>Thanks, </div><div><br></div><div><div><font class="Apple-style-span" color="#000000"><font class="Apple-style-span" face="Calibri">Justin Hopper</font></font></div><div>Software Engineer - DBaaS</div><div><font color="#424242"><font class="Apple-style-span" face="Calibri">irc: juice | </font><font class="Apple-style-span" face="Calibri">gpg: </font>EA238CF3 | twt: @justinhopper</font></div></div></body></html>