openstack/puppet-barbican
Code Issues Proposed changes

Configure dogtag_plugin_nss_password as secret

Browse Source 
Parameter dogtag_plugin/nss_password should be configured as a secret.

Change-Id: I920b82d83200e68ed4d0ed69b3fcdfe8d52fc6cd
Closes-Bug: #1758232
This commit is contained in:
ZhongShengping 2018-03-23 11:44:11 +08:00
parent 68877530ad
commit add33824e4
2 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
manifests/plugins/dogtag.pp
View File

@ -80,7 +80,7 @@ class barbican::plugins::dogtag (
'dogtag_plugin/dogtag_host': value => $dogtag_plugin_dogtag_host;
'dogtag_plugin/dogtag_port': value => $dogtag_plugin_dogtag_port;
'dogtag_plugin/nss_db_path': value => $dogtag_plugin_nss_db_path;
'dogtag_plugin/nss_password': value => $dogtag_plugin_nss_password;
'dogtag_plugin/nss_password': value => $dogtag_plugin_nss_password, secret => true;
'dogtag_plugin/simple_cmc_profile': value => $dogtag_plugin_simple_cmc_profile;
'dogtag_plugin/ca_expiration_time': value => $dogtag_plugin_ca_expiration_time;
'dogtag_plugin/plugin_working_dir': value => $dogtag_plugin_plugin_working_dir;

2
spec/classes/barbican_plugins_dogtag_spec.rb
View File

@ -85,7 +85,7 @@ describe 'barbican::plugins::dogtag' do
is_expected.to contain_barbican_config('dogtag_plugin/nss_db_path')\
.with_value(param_hash[:dogtag_plugin_nss_db_path])
is_expected.to contain_barbican_config('dogtag_plugin/nss_password')\
.with_value(param_hash[:dogtag_plugin_nss_password])
.with_value(param_hash[:dogtag_plugin_nss_password]).with_secret(true)
is_expected.to contain_barbican_config('dogtag_plugin/simple_cmc_profile')\
.with_value(param_hash[:dogtag_plugin_simple_cmc_profile])
is_expected.to contain_barbican_config('dogtag_plugin/ca_expiration_time')\