openstack/openstack-helm
Code Issues Proposed changes
0afa508f06
openstack-helm/keystone/templates
History
Gage Hugo 3d6f3088a3 Add credential delete hook to keystone chart 
This change creates a pre-delete hook to clean out all entries
in the credential table of the keystone database when the
keystone service is deleted. Note that these are not
the typical username/password.[0]

This fixes the issue of leftover credential blobs being saved
in the database that are unable to be decrypted since the
original encryption keys are removed upon deletion of the
keystone service

[0] https://specs.openstack.org/openstack/keystone-specs/specs/keystone/newton/credential-encryption.html

Change-Id: I8adf0878af2f3b880e9194a6cb8d97b58d6895a5
2019-04-17 20:10:48 +00:00
..
bin Add credential delete hook to keystone chart 2019-04-17 20:10:48 +00:00
configmap-bin.yaml Add credential delete hook to keystone chart 2019-04-17 20:10:48 +00:00
configmap-etc.yaml Allow more generic overrides for keystone 2019-04-12 04:16:48 +00:00
cron-job-credential-rotate.yaml Add release uuid to pods and rc objects 2018-09-13 06:29:14 -05:00
cron-job-fernet-rotate.yaml Add release uuid to pods and rc objects 2018-09-13 06:29:14 -05:00
deployment-api.yaml Allow more generic overrides for keystone 2019-04-12 04:16:48 +00:00
ingress-api.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-bootstrap.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-credential-cleanup.yaml Add credential delete hook to keystone chart 2019-04-17 20:10:48 +00:00
job-credential-setup.yaml Add release uuid to pods and rc objects 2018-09-13 06:29:14 -05:00
job-db-drop.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-db-init.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-db-sync.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-domain-manage.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-fernet-setup.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-image-repo-sync.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
job-rabbit-init.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
network_policy.yaml Enable network policy enforcement 2018-10-23 14:58:13 +00:00
pdb.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
pod-rally-test.yaml Add release uuid to pods and rc objects 2018-09-13 06:29:14 -05:00
secret-credential-keys.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-db.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-fernet-keys.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-ingress-tls.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-keystone.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-ldap-tls.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
secret-rabbitmq.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
service-api.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00
service-ingress-api.yaml Revert "Update OSH Author copyrights to OSF" 2018-08-28 17:25:13 +00:00