Networking
ORION-173773: For clusters that use InfiniBand networking on the internal interfaces, the OpenSM service will now be automatically enabled on the cluster’s CNodes after a VAST OS upgrade.
S3
ORION-180193: Added the following user controls to turn on or off S3 Signature V2 authentication:
In VAST CLI, the
--enable-s3-block-v2-authenticationand--disable-s3-block-v2-authenticationoptions on thecluster createcommandIn VAST REST API, the
s3_block_v2_authenticationparameter for the/clusters/endpoint.
VMS
ORION-179577: Capacity values reported in VMS capacity validation messages during DBox migration are now in terabytes, indicated by
TB. Previously, the values were in bytes.ORION-176657: Removed the options to enable and disable a view from VAST Web UI and VAST REST API.
VAST REST API
ORION-172534: The
/api/capacity/capacity_estimation/endpoint now features a newseparatorparameter that lets you specify a custom separator character for a list of paths:/api/capacity/capacity_estimation/?format=api&path=<list of paths>&separator=<separator>Prior to this change, the endpoint only accepted comma-separated lists of paths where directory or file names could not contain a comma.
VAST OS
ORION-172104: VAST OS now includes the OpenSCAP toolkit that lets you run configuration and vulnerability scans on your VAST cluster.
To perform a scan,
sshto the VAST cluster and runoscap, for example:sudo oscap xccdf eval --profile xccdf_org.ssgproject.content_profile_stig_gui \ --cpe /usr/share/xml/scap/ssg/content/ssg-rhel8-cpe-dictionary.xml \ --fetch-remote-resources \ --oval-results --results-arf /tmp/arf.xml \ --report /tmp/report.html \ /usr/share/xml/scap/ssg/content/ssg-rl8-xccdf.xmlFor how-to details on
oscap, see the OpenSCAP User Manual.Caution
Do not remediate the cluster with
oscap.