openstack/os-traits
Code Issues Proposed changes

Add vTPM secret policy traits

Browse Source 
The TPM_SECRET_SECURITY_USER, TPM_SECRET_SECURITY_HOST, and
TPM_SECRET_SECURITY_DEPLOYMENT traits correspond to the `user`, `host`
and `deployment` vTPM secret security policies that compute host can
support, as outlined in [1]. Add them.

[1] https://specs.openstack.org/openstack/nova-specs/specs/2025.1/approved/vtpm-live-migration.html

Implements: blueprint vtpm-live-migration
Change-Id: Iec12c07aa99eaa2b922af836025c7c0debd1db12
This commit is contained in:
Artom Lifshitz
2025-01-25 07:38:00 -05:00
parent 37da3e2bf8
commit 1b608ff60a
1 changed files with 6 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

6
os_traits/compute/security.py
View File

@@ -22,6 +22,12 @@ TRAITS = [
'TPM_TIS',
# support for TPM with Command-Response Buffer(CRB)
'TPM_CRB',
# support for the `user` vTPM secret policy
'TPM_SECRET_SECURITY_USER',
# support for the `host` vTPM secret policy
'TPM_SECRET_SECURITY_HOST',
# support for the `deployment` vTPM secret policy
'TPM_SECRET_SECURITY_DEPLOYMENT',
# support for UEFI Secure Boot
# ref: https://specs.openstack.org/openstack/nova-specs/specs/wallaby/implemented/allow-secure-boot-for-qemu-kvm-guests.html # noqa
'UEFI_SECURE_BOOT',