-
Notifications
You must be signed in to change notification settings - Fork 27
Open
Labels
bugSomething isn't workingSomething isn't working
Description
Describe the bug
The test scenario DatastoreAccess
attempts to validate that the communication between Yugabyte nodes are: 1) authenticated, 2) encrypted, 3) encrypted using a modern enough scheme.
Currently checks 1) and 2) are made against the client ports of Yugabyte using psycopg. This is incorrect as we need to validate the internodes communication, not the client one.
Relevant files where this is implemented:
- https://github.com/interuss/monitoring/blob/ca9f01d53d95cd06e07b44277c5d0ca3a82e6bb9/monitoring/uss_qualifier/scenarios/astm/dss/datastore_access.py
- https://github.com/interuss/monitoring/blob/ca9f01d53d95cd06e07b44277c5d0ca3a82e6bb9/monitoring/uss_qualifier/resources/interuss/datastore/datastore.py
Possible solution
Implement the checks on the internodes communication port (7100 or 9100), possibly using the approach of 3), i.e. checking the raw bytes.
Metadata
Metadata
Assignees
Labels
bugSomething isn't workingSomething isn't working