Currently, SPDM attestation happens at three points in compute tray’s lifecycle: ingestion, after an allocation request arrived from tenant, but before the managed host is allocated, and after a managed host had been released by a tenant. We should probably keep the same pattern, but we need to update it now that the business logic has been moved out of NICo. The only thing that NICo must do is to apply labels and prevent future allocations of resources if the attestation had failed.
Currently, SPDM attestation happens at three points in compute tray’s lifecycle: ingestion, after an allocation request arrived from tenant, but before the managed host is allocated, and after a managed host had been released by a tenant. We should probably keep the same pattern, but we need to update it now that the business logic has been moved out of NICo. The only thing that NICo must do is to apply labels and prevent future allocations of resources if the attestation had failed.