Skip to content

Commit d5135ca

Browse files
authored
Update linux_userData.sh
wrap all secret/password parameters with commas
1 parent 065951d commit d5135ca

File tree

1 file changed

+16
-17
lines changed

1 file changed

+16
-17
lines changed

Management-Utilities/ec2-user-data-iscsi-create-and-mount/linux_userData.sh

Lines changed: 16 additions & 17 deletions
Original file line numberDiff line numberDiff line change
@@ -32,11 +32,11 @@ chmod u+x uninstall.sh
3232
function getSecretValue() {
3333
secret_name=$1
3434
aws_region=$2
35-
SECRET_VALUE=$(aws secretsmanager get-secret-value \
35+
SECRET_VALUE="$(aws secretsmanager get-secret-value \
3636
--secret-id "$secret_name" \
3737
--region "$aws_region" \
3838
--query 'SecretString' \
39-
--output text)
39+
--output text)"
4040

4141
if [ $? -ne 0 ]; then
4242
echo "Failed to retrieve the secret: $secret_name, Aborting."
@@ -116,27 +116,27 @@ addUndoCommand "yum remove -y sshpass"
116116
# Test connection to ONTAP
117117
commandDescription="Testing connection to ONTAP."
118118
logMessage "${commandDescription}"
119-
sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "version"
119+
sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "version"
120120
checkCommand "${commandDescription}"
121121

122122
# group name should be the hostname of the linux host
123123
groupName=$(hostname)
124124

125125
commandDescription="Create initiator group for vserver: ${SVM_NAME} group name: ${groupName} and intiator name: ${initiatorName}"
126126

127-
lunGroupresult=$(sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup show -vserver $SVM_NAME -igroup $groupName -initiator $initiatorName -protocol iscsi -ostype linux")
127+
lunGroupresult=$(sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup show -vserver $SVM_NAME -igroup $groupName -initiator $initiatorName -protocol iscsi -ostype linux")
128128
if [[ "$lunGroupresult" == *"There are no entries matching your query."* ]]; then
129129
logMessage "Initiator ${initiatorName} with group ${groupName} does not exist, creating it."
130130
logMessage "${commandDescription}"
131-
sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup create -vserver $SVM_NAME -igroup $groupName -initiator $initiatorName -protocol iscsi -ostype linux"
131+
sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup create -vserver $SVM_NAME -igroup $groupName -initiator $initiatorName -protocol iscsi -ostype linux"
132132
checkCommand "${commandDescription}"
133-
addUndoCommand "sshpass -p ${FSXN_PASSWORD} ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun igroup delete -vserver ${SVM_NAME} -igroup ${groupName} -force"
133+
addUndoCommand "sshpass -p \"${FSXN_PASSWORD}\" ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun igroup delete -vserver ${SVM_NAME} -igroup ${groupName} -force"
134134
else
135135
logMessage "Initiator ${initiatorName} with group ${groupName} already exists, skipping creation."
136136
fi
137137

138138
# confirm that igroup was created
139-
isInitiatorGroupCreadted=$(sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup show -igroup $groupName -protocol iscsi" | grep $groupName | wc -l)
139+
isInitiatorGroupCreadted=$(sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun igroup show -igroup $groupName -protocol iscsi" | grep $groupName | wc -l)
140140
if [ "$isInitiatorGroupCreadted" -eq 1 ]; then
141141
logMessage "Initiator group ${groupName} was created"
142142
else
@@ -147,40 +147,40 @@ fi
147147

148148
commandDescription="Create volume for vserver: ${SVM_NAME} volume name: ${VOLUME_NAME} and size: ${VOLUME_SIZE}g"
149149
logMessage "${commandDescription}"
150-
sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "volume create -vserver ${SVM_NAME} -volume ${VOLUME_NAME} -aggregate aggr1 -size ${VOLUME_SIZE}g -state online"
150+
sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "volume create -vserver ${SVM_NAME} -volume ${VOLUME_NAME} -aggregate aggr1 -size ${VOLUME_SIZE}g -state online"
151151
checkCommand "${commandDescription}"
152-
addUndoCommand "sshpass -p ${FSXN_PASSWORD} ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} volume delete -vserver ${SVM_NAME} -volume ${VOLUME_NAME} -force"
152+
addUndoCommand "sshpass -p \"$FSXN_PASSWORD\" ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} volume delete -vserver ${SVM_NAME} -volume ${VOLUME_NAME} -force"
153153

154154
commandDescription="Create iscsi lun for vserver: ${SVM_NAME} volume name: ${VOLUME_NAME} and lun name: ${LUN_NAME} and size: ${LUN_SIZE}g which is 90% of the volume size"
155155
logMessage "${commandDescription}"
156-
sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun create -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/$LUN_NAME -size ${LUN_SIZE}g -ostype linux -space-allocation enabled"
156+
sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun create -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/$LUN_NAME -size ${LUN_SIZE}g -ostype linux -space-allocation enabled"
157157
checkCommand "${commandDescription}"
158-
addUndoCommand "sshpass -p ${FSXN_PASSWORD} ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun delete -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -force"
158+
addUndoCommand "sshpass -p \"$FSXN_PASSWORD\" ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun delete -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -force"
159159

160160
# Create a mapping from the LUN you created to the igroup you created
161161
# The LUN ID integer is specific to the mapping, not to the LUN itself.
162162
# This is used by the initiators in the igroup as the Logical Unit Number use this value for the initiator when accessing the storage.
163163
commandDescription="Create a mapping from the LUN you created to the igroup you created"
164164
logMessage "${commandDescription}"
165165
lun_id=0
166-
sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun mapping create -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -igroup ${groupName} -lun-id 0"
166+
sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun mapping create -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -igroup ${groupName} -lun-id 0"
167167
checkCommand "${commandDescription}"
168168

169169
commandDescription="Validate the lun mapping was created"
170170
logMessage "${commandDescription}"
171-
serialHex=$(sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun show -path /vol/${VOLUME_NAME}/${LUN_NAME} -fields state,mapped,serial-hex" | grep $SVM_NAME | awk '{print $3}')
171+
serialHex=$(sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "lun show -path /vol/${VOLUME_NAME}/${LUN_NAME} -fields state,mapped,serial-hex" | grep $SVM_NAME | awk '{print $3}')
172172
if [ -n "$serialHex" ]; then
173173
logMessage "Lun mapping was created"
174174
else
175175
logMessage "Lun mapping was not created, aborting"
176-
addUndoCommand "sshpass -p ${FSXN_PASSWORD} ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun mapping delete -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -igroup ${groupName}"
176+
addUndoCommand "sshpass -p \"${FSXN_PASSWORD}\" ssh -o StrictHostKeyChecking=no ${ONTAP_USER}@${FSXN_ADMIN_IP} lun mapping delete -vserver ${SVM_NAME} -path /vol/${VOLUME_NAME}/${LUN_NAME} -igroup ${groupName}"
177177
fi
178178

179179
# The serail hex in needed for creating readable name for the block device.
180180
commandDescription="Get the iscsi interface addresses for the svm ${SVM_NAME}"
181181
logMessage "${commandDescription}"
182-
iscsi1IP=$(sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "network interface show -vserver ${SVM_NAME}" | grep -e iscsi_1 | awk '{print $3}')
183-
iscsi2IP=$(sshpass -p $FSXN_PASSWORD ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "network interface show -vserver ${SVM_NAME}" | grep -e iscsi_2 | awk '{print $3}')
182+
iscsi1IP=$(sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "network interface show -vserver ${SVM_NAME}" | grep -e iscsi_1 | awk '{print $3}')
183+
iscsi2IP=$(sshpass -p "$FSXN_PASSWORD" ssh -o StrictHostKeyChecking=no $ONTAP_USER@$FSXN_ADMIN_IP "network interface show -vserver ${SVM_NAME}" | grep -e iscsi_2 | awk '{print $3}')
184184

185185
if [ -n "$i$iscsi1IP" ] && [ -n "$iscsi2IP" ]; then
186186
iscsi1IP=$(echo ${iscsi1IP%/*})
@@ -213,7 +213,6 @@ addUndoCommand "iscsiadm --mode node -T $targetInitiator --logout"
213213

214214
# verify that dm-multipath has identified and merged the iSCSI sessions
215215
multipath -ll
216-
device_name=fsxontap
217216

218217
# Add the following section to the /etc/multipath.conf file:
219218
# multipaths {

0 commit comments

Comments
 (0)