[ https://issues.apache.org/jira/browse/CLOUDSTACK-5017?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13813430#comment-13813430 ]
ASF subversion and git services commented on CLOUDSTACK-5017: ------------------------------------------------------------- Commit 9a62239a92c5eafca6fafee1fbccd413bdfb91af in branch refs/heads/rbac from [~minchen07] [ https://git-wip-us.apache.org/repos/asf?p=cloudstack.git;h=9a62239 ] CLOUDSTACK-5017: Throw CloudRuntimeException in case of template/volume download when ssvm is not ready so that caller can remove some leftover entries in template_store_ref and volume_store_ref. > If SSVM is unavailable DownloadCommands will be routed to mgmt server > --------------------------------------------------------------------- > > Key: CLOUDSTACK-5017 > URL: https://issues.apache.org/jira/browse/CLOUDSTACK-5017 > Project: CloudStack > Issue Type: Bug > Security Level: Public(Anyone can view this level - this is the > default.) > Components: Storage Controller > Affects Versions: 4.2.0 > Reporter: Darren Shepherd > Assignee: Min Chen > Priority: Blocker > Fix For: 4.3.0 > > > If a SSVM in the zone is not available, meaning either it does not exist or > the host entry is not Up or Connecting, DownloadCommand will get routed to > LocalHostEndpoint. This is particularily dangerous in a NFS setup. If the > mgmt server handles the DownloadCommand it has sudo access to mount NFS and > perform the action. This mean the mgmt server is now in the data path, or > worse, it could hang if it does not have network access to the NFS server. -- This message was sent by Atlassian JIRA (v6.1#6144)