Remove VxFlex OS credentials from connection_properties

VxFlex OS password is not stored in block_device_mapping table.
Instead of this passwords are stored in separate file and are
retrieved during each attach/detach operation.

The stable/rocky branch is in Extended Maintenance mode and is no
longer released from.  If you decide to apply this patch to your
deployment, you must make a corresponding change to the os-brick
library.  You can find the os-brick patch for stable/rocky here:
    https://review.opendev.org/#/c/733103/

Additionally, you must deploy a new configuration file on compute
nodes, cinder nodes, and anywhere you would perform a volume
attachment in your deployment.  See the documentation change on
this patch for details about the new config file.

See OSSN-0086 for more information about this change:
    https://wiki.openstack.org/wiki/OSSN/OSSN-0086

Closes-Bug: #1823200
Change-Id: Ic115fbe455c00589e7b8e60eca91e979bac276ea
This commit is contained in:
Ivan Pchelintsev 2020-06-01 12:12:53 +03:00 committed by Brian Rosmaita
parent 4aa3f20af4
commit c427484d75
2 changed files with 30 additions and 3 deletions

View File

@ -150,9 +150,10 @@ class ScaleIODriver(driver.VolumeDriver):
2.0.2: Added consistency group support to generic volume groups 2.0.2: Added consistency group support to generic volume groups
2.0.3: Added cache for storage pool and protection domains info 2.0.3: Added cache for storage pool and protection domains info
2.0.4: Added compatibility with os_brick>1.15.3 2.0.4: Added compatibility with os_brick>1.15.3
2.0.4.1: Fix for Bug #1823200. See OSSN-0086 for details.
""" """
VERSION = "2.0.4" VERSION = "2.0.4.1"
# ThirdPartySystems wiki # ThirdPartySystems wiki
CI_WIKI_NAME = "DELL_EMC_ScaleIO_CI" CI_WIKI_NAME = "DELL_EMC_ScaleIO_CI"
@ -226,8 +227,7 @@ class ScaleIODriver(driver.VolumeDriver):
'serverIP': self.server_ip, 'serverIP': self.server_ip,
'serverPort': self.server_port, 'serverPort': self.server_port,
'serverUsername': self.server_username, 'serverUsername': self.server_username,
'serverPassword': self.server_password, 'config_group': self.configuration.config_group,
'serverToken': self.server_token,
'iopsLimit': None, 'iopsLimit': None,
'bandwidthLimit': None, 'bandwidthLimit': None,
} }

View File

@ -211,6 +211,33 @@ parameters as follows:
san_password = SIO_PASSWD san_password = SIO_PASSWD
san_thin_provision = false san_thin_provision = false
Connector configuration
~~~~~~~~~~~~~~~~~~~~~~~
Before using attach/detach volume operations VxFlex OS connector must be
properly configured. On each node where VxFlex OS SDC is installed do the
following:
#. Create ``/opt/emc/scaleio/openstack/connector.conf`` if it does not
exist.
.. code-block:: console
$ mkdir -p /opt/emc/scaleio/openstack
$ touch /opt/emc/scaleio/openstack/connector.conf
#. For each VxFlex OS section in the ``cinder.conf`` create the same section in
the ``/opt/emc/scaleio/openstack/connector.conf`` and populate it with
passwords. Example:
.. code-block:: ini
[vxflexos]
san_password = SIO_PASSWD
[vxflexos-new]
san_password = SIO2_PASSWD
.. _cg_configuration_options_emc: .. _cg_configuration_options_emc:
Configuration options Configuration options