tripleo-heat-templates/deployment/glance
Alan Bishop 48fd886a03 Distribute iscsid.conf to all containers using iscsi
This patch updates the way files related to iscsi are distributed
to the cinder, glance and nova containers that use the protocol.

Previously it was thought that only the iscsid container needs
access to /etc/iscsi/iscsid.conf, but the LP bug reveals the client
side also reads the file in order to determine the list of chap
algorithms to offer when initiating an iscsi connection.

The bug was exposed when testing a secure environment that uses a
non-default list of chap algorithms. The iscsid container was using
the customized list, but the client containers (e.g. nova) were
using the default list, which caused iscsid to reject connections.

Closes-Bug: #1932181
Change-Id: Iad255451726867dc172404513fdac4ad0599c4c0
2021-06-16 10:30:05 -07:00
..
glance-api-container-puppet.yaml Distribute iscsid.conf to all containers using iscsi 2021-06-16 10:30:05 -07:00
glance-api-edge-container-puppet.yaml Use server side env merging for ServiceNetMap/VipSubnetMap 2021-05-19 10:16:58 +05:30