Skip to content

Fix azure-snp-vtpm#161

Draft
lmilleri wants to merge 3 commits intoopenshift:mainfrom
lmilleri:fix-az-snp-vtpm
Draft

Fix azure-snp-vtpm#161
lmilleri wants to merge 3 commits intoopenshift:mainfrom
lmilleri:fix-az-snp-vtpm

Conversation

@lmilleri
Copy link
Copy Markdown

No description provided.

Signed-off-by: Leonardo Milleri <lmilleri@redhat.com>
@openshift-ci openshift-ci bot added the do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. label Jan 21, 2026
@lmilleri
Copy link
Copy Markdown
Author

/retest

1 similar comment
@lmilleri
Copy link
Copy Markdown
Author

lmilleri commented Feb 6, 2026

/retest

@openshift-merge-robot openshift-merge-robot added the needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD. label Feb 16, 2026
@openshift-merge-robot
Copy link
Copy Markdown

PR needs rebase.

Details

Instructions for interacting with me using PR comments are available here. If you have questions or suggestions related to my behavior, please file an issue against the kubernetes-sigs/prow repository.

Signed-off-by: Leonardo Milleri <lmilleri@redhat.com>
The azure-snp-vtpm verifier was running CPU-intensive certificate
validation in async context, causing thread pool exhaustion. When all
worker threads got blocked doing crypto validation, async file reads
in RVPS would hang indefinitely, causing attestation requests to retry
in a loop.

Wrapped the blocking cryptographic operations (ca_chain.validate() and
vcek.validate()) in tokio::task::spawn_blocking() to move them off the
async runtime thread pool.

Signed-off-by: Leonardo Milleri <lmilleri@redhat.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

do-not-merge/work-in-progress Indicates that a PR should not merge because it is a work in progress. needs-rebase Indicates a PR cannot be merged because it has merge conflicts with HEAD.

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants