OpenStack Shared File Systems Service (Manila)

Infinidat Manila driver doesn't support TLS/SSL communication

Bug #1986653 reported by Alexander Deiter
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
Fix Released
Medium
Alexander Deiter
OpenStack Shared File Systems Service (Manila) zed-3

Bug Description

Infinidat Manila driver doesn't support TLS/SSL communication and always uses plain HTTP for storage management operations.

Steps to reproduce:
* Configure an OpenStack environment with Infinidat NFS backend
* Create a share

Expected result:
Secure HTTPS transport was used to create the share on the storage side

Actual result:
Unsecured HTTP was used to create the share on the storage side

See original description
Alexander Deiter (adeiter)
Changed in manila:
status: New → In Progress
assignee: nobody → Alexander Deiter (adeiter)
Alexander Deiter (adeiter)
summary: - Infinidat Manila driver doesn't support SSL options
+ Infinidat Manila driver doesn't support TLS/SSL communication
description: updated
Revision history for this message
Vida Haririan (vhariria) wrote :

Hello, The bug is currently in progress but we didn't find a related change on gerrit. Please clarify the current status.
Thanks.

Changed in manila:
importance: Undecided → Medium
Revision history for this message
Vida Haririan (vhariria) wrote :

Additional comments at https://meetings.opendev.org/meetings/manila/2022/manila.2022-08-18-15.00.log.html

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/openstack/manila/+/853780

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (master)

Reviewed: https://review.opendev.org/c/openstack/manila/+/853780
Committed: https://opendev.org/openstack/manila/commit/52dac7619469240987171640f6674bef56261fda
Submitter: "Zuul (22348)"
Branch: master

commit 52dac7619469240987171640f6674bef56261fda
Author: Alexander Deiter <email address hidden>
Date: Fri Aug 19 17:07:56 2022 +0300

    [Infinidat] add support for TLS/SSL communication

    Infinidat driver doesn't support TLS/SSL communication
    and uses plain HTTP for storage management operations.

    This patch adds support for SSL/TLS communication for
    storage management operations. Use `infinidat_use_ssl`
    under backend section to enable or disable TLS/SSL
    communication between the Manila share service and the
    storage backend. And `infinidat_suppress_ssl_warnings`
    under backend section to suppress requests library SSL
    certificate warnings.

    Closes-Bug: #1986653
    Signed-off-by: Alexander Deiter <email address hidden>
    Change-Id: Ia6bbde9aa1702be83f737ab6876a522fa30381c7

Changed in manila:
status: In Progress → Fix Released
Goutham Pacha Ravi (gouthamr)
Changed in manila:
milestone: none → zed-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 15.0.0.0rc1

This issue was fixed in the openstack/manila 15.0.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (stable/yoga)

Fix proposed to branch: stable/yoga
Review: https://review.opendev.org/c/openstack/manila/+/863282

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (stable/yoga)

Reviewed: https://review.opendev.org/c/openstack/manila/+/863282
Committed: https://opendev.org/openstack/manila/commit/fc566dd97b8fad2f8f54e2f23dfbeab95f30f14c
Submitter: "Zuul (22348)"
Branch: stable/yoga

commit fc566dd97b8fad2f8f54e2f23dfbeab95f30f14c
Author: Alexander Deiter <email address hidden>
Date: Fri Aug 19 17:07:56 2022 +0300

    [Infinidat] add support for TLS/SSL communication

    Infinidat driver doesn't support TLS/SSL communication
    and uses plain HTTP for storage management operations.

    This patch adds support for SSL/TLS communication for
    storage management operations. Use `infinidat_use_ssl`
    under backend section to enable or disable TLS/SSL
    communication between the Manila share service and the
    storage backend. And `infinidat_suppress_ssl_warnings`
    under backend section to suppress requests library SSL
    certificate warnings.

    Closes-Bug: #1986653
    Signed-off-by: Alexander Deiter <email address hidden>
    Change-Id: Ia6bbde9aa1702be83f737ab6876a522fa30381c7
    (cherry picked from commit 52dac7619469240987171640f6674bef56261fda)

tags: added: in-stable-yoga
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (stable/xena)

Fix proposed to branch: stable/xena
Review: https://review.opendev.org/c/openstack/manila/+/866458

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 14.0.1

This issue was fixed in the openstack/manila 14.0.1 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (stable/xena)

Reviewed: https://review.opendev.org/c/openstack/manila/+/866458
Committed: https://opendev.org/openstack/manila/commit/328af8b24f3d603526ecb829077c4d1c7df355ff
Submitter: "Zuul (22348)"
Branch: stable/xena

commit 328af8b24f3d603526ecb829077c4d1c7df355ff
Author: Alexander Deiter <email address hidden>
Date: Fri Aug 19 17:07:56 2022 +0300

    [Infinidat] add support for TLS/SSL communication

    Infinidat driver doesn't support TLS/SSL communication
    and uses plain HTTP for storage management operations.

    This patch adds support for SSL/TLS communication for
    storage management operations. Use `infinidat_use_ssl`
    under backend section to enable or disable TLS/SSL
    communication between the Manila share service and the
    storage backend. And `infinidat_suppress_ssl_warnings`
    under backend section to suppress requests library SSL
    certificate warnings.

    Closes-Bug: #1986653
    Signed-off-by: Alexander Deiter <email address hidden>
    Change-Id: Ia6bbde9aa1702be83f737ab6876a522fa30381c7
    (cherry picked from commit 52dac7619469240987171640f6674bef56261fda)
    (cherry picked from commit fc566dd97b8fad2f8f54e2f23dfbeab95f30f14c)

tags: added: in-stable-xena
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (stable/wallaby)

Fix proposed to branch: stable/wallaby
Review: https://review.opendev.org/c/openstack/manila/+/868015

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 13.1.0

This issue was fixed in the openstack/manila 13.1.0 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (stable/wallaby)

Reviewed: https://review.opendev.org/c/openstack/manila/+/868015
Committed: https://opendev.org/openstack/manila/commit/e3b0a9ee756b6dc89bb1823d054e4bb52de0618b
Submitter: "Zuul (22348)"
Branch: stable/wallaby

commit e3b0a9ee756b6dc89bb1823d054e4bb52de0618b
Author: Alexander Deiter <email address hidden>
Date: Fri Aug 19 17:07:56 2022 +0300

    [Infinidat] add support for TLS/SSL communication

    Infinidat driver doesn't support TLS/SSL communication
    and uses plain HTTP for storage management operations.

    This patch adds support for SSL/TLS communication for
    storage management operations. Use `infinidat_use_ssl`
    under backend section to enable or disable TLS/SSL
    communication between the Manila share service and the
    storage backend. And `infinidat_suppress_ssl_warnings`
    under backend section to suppress requests library SSL
    certificate warnings.

    Closes-Bug: #1986653
    Signed-off-by: Alexander Deiter <email address hidden>
    Change-Id: Ia6bbde9aa1702be83f737ab6876a522fa30381c7
    (cherry picked from commit 52dac7619469240987171640f6674bef56261fda)
    (cherry picked from commit fc566dd97b8fad2f8f54e2f23dfbeab95f30f14c)
    (cherry picked from commit 328af8b24f3d603526ecb829077c4d1c7df355ff)

tags: added: in-stable-wallaby
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.