CLI capability to generate and encrypt passphrases
1. Adds the passphrases generation capability in Pegleg CLI, so that pegleg can generation random passwords based on a specification declared in pegleg/PassphrasesCatalog documents 2. Pegleg also wraps the generated passphrase documents in pegleg managed documents, and encrypts the data. 3. Adds unit test cases for passphrase generation. 4. Updates pegleg CLI document. Change-Id: I21d7668788cc24a8e0cc9cb0fb11df97600d0090
This commit is contained in:
pallav
212
site_yamls/site/passphrase-catalog.yaml
Normal file
212
site_yamls/site/passphrase-catalog.yaml
Normal file
@@ -0,0 +1,212 @@
|
||||
---
|
||||
# The purpose of this file is to define the Passpharase certificates for the environment
|
||||
#
|
||||
schema: pegleg/PassphraseCatalog/v1
|
||||
metadata:
|
||||
schema: metadata/Document/v1
|
||||
name: cluster-passphrases
|
||||
layeringDefinition:
|
||||
abstract: false
|
||||
layer: site
|
||||
storagePolicy: cleartext
|
||||
data:
|
||||
passphrases:
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ceph_swift_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_keystone_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_armada_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_postgres_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_oslo_db_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_deckhand_postgres_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_deckhand_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_barbican_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_barbican_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_drydock_postgres_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_drydock_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_maas_postgres_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_keystone_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_promenade_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_shipyard_keystone_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_shipyard_postgres_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_airflow_postgres_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: ucp_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: maas_region_secret
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_barbican_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_barbican_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_barbican_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_barbican_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_barbican_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_cinder_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_cinder_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_cinder_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_cinder_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_glance_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_glance_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_glance_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_glance_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_glance_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_stack_user_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_heat_trustee_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_horizon_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_elasticsearch_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_grafana_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_grafana_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_grafana_oslo_db_session_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_kibana_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_openstack_exporter_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_infra_oslo_db_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_keystone_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_keystone_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_keystone_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_keystone_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_keystone_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_neutron_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_neutron_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_neutron_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_neutron_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_neutron_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_nova_oslo_db_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_nova_oslo_messaging_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_nova_oslo_messaging_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_nova_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_nova_rabbitmq_erlang_cookie
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_oslo_db_admin_password
|
||||
encrypted: true
|
||||
- description: 'short description of the passphrase'
|
||||
document_name: osh_placement_password
|
||||
encrypted: true
|
||||
...
|
||||
Reference in New Issue
Block a user