HPE3PAR passwords stored in plain text in system service-parameter-list

[Maria Yousaf]

Brief Description
-----------------
HPE3PAR passwords are stored in plain text in system service-parameter-list.

Severity
--------
Major

Steps to Reproduce
------------------
- Provision HPE3PAR
- View system service-parameter-list

Expected Behavior
------------------
- Sensitive information such as passwords should be obscured

Actual Behavior
----------------
- Passwords are shown in plain text

Reproducibility
---------------
100%

System Configuration
--------------------
Storage system

Branch/Pull Time/Commit
-----------------------
master as of 2018-10-15_21-18-00

Timestamp/Logs
--------------
N/A

[Ghada Khalil (gkhalil)]

Targeting stx.2019.03 -- issue related to recent 3PAR feature.
The password should be * out (as is done for the EMC SAN).

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/615092

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/615092
Committed: https://git.openstack.org/cgit/openstack/stx-config/commit/?id=f9bef78dfd047097c01b22f2e1115b61c8801670
Submitter: Zuul
Branch: master

commit f9bef78dfd047097c01b22f2e1115b61c8801670
Author: Elena Taivan <email address hidden>
Date: Fri Nov 2 08:15:13 2018 +0000

    HPE3PAR passwords stored in plain text in service-parameter-list

    The san_login and san_password parameters provide sensitive
    information and should be obscured. These values were moved
    to the CINDER_HPE3PAR_PARAMETER_PROTECTED list as to not have
    them displayed in plain text when service-parameter-list is issued.

    Change-Id: I3544a127410b827a90a9da7298df1ce62008bccd
    Closes-Bug: #1799762
    Signed-off-by: Elena Taivan <email address hidden>