Simon DodsleyandClaude Opus 4.8
763a76ddd3
The FlashBlade share driver unconditionally called disable_verify_ssl() during do_setup(), leaving the management connection to the array with no certificate verification and open to man-in-the-middle attacks, with no way for an operator to enable verification. This adds two configuration options: * flashblade_ssl_cert_verify (boolean, default True) - verify the certificate presented by the FlashBlade management interface. * flashblade_ca_cert_path (string) - optional path to a CA certificate bundle used for verification, for self-signed or private CAs. Certificate verification is now enabled by default. Deployments using a self-signed or private CA certificate must supply the CA bundle via flashblade_ca_cert_path, install it in the system trust store, or explicitly set flashblade_ssl_cert_verify = False to retain the previous behaviour. The driver version is also bumped to 11.0.0 for the 2026.2 (Hibiscus) release. This addresses the insecure-by-default driver concerns raised in the openstack-discuss security documentation thread. Co-Authored-By: Claude Opus 4.8 (1M context) <noreply@anthropic.com> Change-Id: I93c5081763af6b1623ac243c25059264a0f185ff Signed-off-by: Simon Dodsley <simon@purestorage.com>
Manila Development Docs
Files under this directory tree are used for generating the documentation for the manila source code.
Developer documentation is built to: https://docs.openstack.org/manila/latest/
Tools
- Sphinx
-
The Python Sphinx package is used to generate the documentation output. Information on Sphinx, including formatting information for RST source files, can be found in the Sphinx online documentation.
- Graphviz
-
Some of the diagrams are generated using the
dotlanguage from Graphviz. See the Graphviz documentation for Graphviz and dot language usage information.
Building Documentation
Doc builds are performed using tox with the docs
target:
% cd ..
% tox -e docs