System and method for self-aware virtual machine image deployment enforcement
According to one embodiment of the present disclosure, a method includes receiving a request to instantiate a virtual machine image in a virtualization environment. The method also includes sending a request for verification of the virtualization environment. The method further includes receiving information from the enforcement module in response to the request for verification of the virtualization environment. The method further includes determining whether the virtualization environment is verified based on the information received.
1. A method for virtual machine image deployment enforcement, comprising:
receiving a request at a virtual machine image to instantiate a virtual machine image in a virtualization environment;
sending a request from the virtual machine for verification of the virtualization environment from the virtual machine image;
receiving information at the virtual machine image in response to the request for verification of the virtualization environment;
determining whether the virtualization environment is verified based on the information received, wherein the information comprises a certificate issued by a trusted source;
instantiating the virtual machine image on a first virtual machine in the virtualization environment in response to determining that the virtualization environment is verified; and
communicating with a native API and preventing instantiation of the virtual machine image in response to determining that the virtualization environment is not verified.
2. The method of claim 1 , further comprising:
receiving one or more virtual machine deployment policies; and
determining whether the first virtual machine is compliant with the one or more virtual machine deployment policies.
3. The method of claim 2 , wherein it is determined that the first virtual machine is not compliant with one or more of the virtual machine deployment policies, the method further comprising generating an alert indicating non-compliance with one or more of the virtual machine deployment policies.
4. The method of claim 1 , wherein the information received comprises a payload identifying a virtual machine in the virtualization environment; the method further comprising determining that the virtualization environment is not verified.
5. The method of claim 1 , further comprising denying the request to instantiate the first virtual machine in the virtualization environment in response to a failed verification of the virtualization environment.
6. The method of claim 5 , further comprising deleting the virtual machine image in response to a failed verification of the virtualization environment.
7. A system for virtual machine image deployment enforcement, comprising one or more processors operable to:
receive a request at a virtual machine image to instantiate a virtual machine image in a virtualization environment;
send a request from the virtual machine for verification of the virtualization environment;
receive information at the virtual machine image in response to the request for verification of the virtualization environment;
determine whether the virtualization environment is verified based on the information received, wherein the information comprises a certificate issued by a trusted source;
instantiate the virtual machine image on a first virtual machine in the virtualization environment in response to determining that the virtualization environment is verified; and
communicate with a native API and prevent instantiation of the virtual machine image in response to determining that the virtualization environment is not verified.
8. The system of claim 7 , wherein the one or more processors are further operable to:
receive one or more virtual machine deployment policies; and
determine whether the first virtual machine is compliant with the one or more virtual machine deployment policies.
9. The system of claim 8 , wherein it is determined that the first virtual machine is not compliant with one or more of the virtual machine deployment policies, and wherein the one or more processors are further operable to generate an alert indicating non-compliance with one or more of the virtual machine deployment policies.
10. The system of claim 7 , wherein the information received comprises a payload identifying a virtual machine in the virtualization environment; the one or more processors further operable to determine that the virtualization environment is not verified.
11. The system of claim 7 , wherein the one or more processors are further operable to deny the request to instantiate the virtual machine image in the virtualization environment in response to a failed verification of the virtualization environment.
12. The system of claim 11 , wherein the one or more processors are further operable to delete the virtual machine image in response to a failed verification of the virtualization environment.
13. Logic encoded in non-transitory computer readable medium, the logic comprising instructions that when executed by a processor are operable to:
receive a request at a virtual machine image to instantiate a virtual machine image in a virtualization environment;
send a request from the virtual machine for verification of the virtualization environment;
receive information at the virtual machine image in response to the request for verification of the virtualization environment;
determine whether the virtualization environment is verified based on the information received, wherein the information comprises a certificate issued by a trusted source;
instantiate the virtual machine image on a first virtual machine in the virtualization environment in response to determining that the virtualization environment is verified; and
communicate with a native API and prevent instantiation of the virtual machine image in response to determining that the virtualization environment is not verified.
14. The logic of claim 13 , wherein the instructions are further operable to: receive one or more virtual machine deployment policies; and determine whether the first virtual machine is compliant with the one or more virtual machine deployment policies.
15. The logic of claim 14 , wherein it is determined that the first virtual machine is not compliant with one or more of the virtual machine deployment policies, and wherein the instructions are further operable to generate an alert indicating non-compliance with one or more of the virtual machine deployment policies.
16. The logic of claim 13 , wherein the information received comprises a payload identifying a virtual machine in the virtualization environment; the instructions further operable to determine that the virtualization environment is not verified.
17. The logic of claim 13 , wherein the instructions are further operable to deny the request to instantiate the virtual machine image in the virtualization environment in response to a failed verification of the virtualization environment.
18. The logic of claim 17 , wherein the instructions are further operable to delete the virtual machine image in response to a failed verification of the virtualization environment.