root credentials must be used

[yellowpattern]

This driver does not work unless "root" and the root password are stored in cinder.conf.

That seems like a HUGE security problem.

[william-gr]

The API does not support any other keys yet, cinder.conf permissions needs to be adjusted so its not world readable.

[donnydavis]

Any user that can create and delete volumes poses a security risk IMO. If you look at any of the other block drivers this is pretty much the case for them too, a super privileged user creates and deletes resources in the block provider. I think the security model revolves around end users not being able to access FreeNAS directly because they have to use the Openstack API.

Just my 2c though

[yellowpattern]

It would be nice if there was a credential that could be assigned to a non-root user and a dataset matched up.

[dmcgrandle]

@yellowpattern - looks like this API functionality is coming in the TrueNAS core v12 release that is going BETA.

[YiHuangDB]

Now #29 merged to master, you can use ixsystems_apikey in cinder.conf option to specify your TrueNAS apikey and authenticate cinder driver without username and password specified in /etc/cinder/cinder.conf config file. This works for both http and https api endpoint. Set ixsystems_transport_type = https also supported now.