Allowing SSH certificates for secureboot (#2563)

Signed-off-by: Sasi Palaka <[email protected]> Co-authored-by: Sasi Palaka <[email protected]>
AthenZ · Mar 15, 2024 · 54de6a9 · 54de6a9
1 parent 966033a
commit 54de6a9
Show file tree

Hide file tree

Showing 2 changed files with 6 additions and 1 deletion.
diff --git a/...ce_provider/src/main/java/com/yahoo/athenz/instance/provider/impl/SecureBootProvider.java b/...ce_provider/src/main/java/com/yahoo/athenz/instance/provider/impl/SecureBootProvider.java
@@ -175,7 +175,9 @@ InstanceConfirmation validateInstanceRequest(InstanceConfirmation confirmation,
         }
 
         Map<String, String> attributes = new HashMap<>();
+        attributes.put(InstanceProvider.ZTS_CERT_SSH, "true");
         confirmation.setAttributes(attributes);
+
         return confirmation;
     }
 

diff --git a/...rovider/src/test/java/com/yahoo/athenz/instance/provider/impl/SecureBootProviderTest.java b/...rovider/src/test/java/com/yahoo/athenz/instance/provider/impl/SecureBootProviderTest.java
@@ -67,7 +67,10 @@ public void testConfirmInstance() {
         attributes.put(InstanceProvider.ZTS_INSTANCE_CERT_SUBJECT_DN, subjectDn);
         confirmation.setAttributes(attributes);
 
-        assertNotNull(provider.confirmInstance(confirmation));
+        InstanceConfirmation result = provider.confirmInstance(confirmation);
+        assertNotNull(result);
+        assertEquals(result.getAttributes().get(InstanceProvider.ZTS_CERT_SSH), "true");
+
         provider.close();
         System.clearProperty(SecureBootProvider.ZTS_PROP_SB_ATTR_VALIDATOR_FACTORY_CLASS);
     }