Add passphrase generation for Octavia

A recent change[1] to Octavia added a parameter named
server_certs_key_passphrase, which means that we should generate a
password for it to avoid using the default value.

This patch adds OctaviaServerCertsKeyPassphrase to the list of
generated password/secrets, similarly to this past change[2].

Closes-Bug: #1821756
Related-Bug: #1821751

[1] I06d329ca53bc36bd27f7870ae7c7ca0cf18575b2
[2] I1dd1873b646e8569ed0a85c5ee7eb3bec3a8b1fa

Change-Id: I9699961faf8b3430e4372e4ff3ae2bf7e7ceea18
(cherry picked from commit da967dd80b)
This commit is contained in:
Nir Magnezi 2019-03-25 14:54:07 +02:00
parent c42c3603e3
commit 2be48861a4
2 changed files with 2 additions and 0 deletions

View File

@ -102,6 +102,7 @@ PASSWORD_PARAMETER_NAMES = (
'NovaPassword',
'NovajoinPassword',
'MigrationSshKey',
'OctaviaServerCertsKeyPassphrase',
'OctaviaCaKeyPassphrase',
'OctaviaHeartbeatKey',
'OctaviaPassword',

View File

@ -57,6 +57,7 @@ _EXISTING_PASSWORDS = {
'PankoPassword': 'cVZXehsSc2KdmFFMKDudxTLKn',
'OctaviaHeartbeatKey': 'oct-heartbeat-key',
'OctaviaPassword': 'NMl7j3nKk1VVwMxUZC8Cgw==',
'OctaviaServerCertsKeyPassphrase': 'aW5zZWN1cmUta2V5LWRvLW5vdC11c2U=',
'OctaviaCaKeyPassphrase': 'SLj4c3uCk4DDxPwQOG1Heb==',
'ManilaPassword': 'NYJN86Fua3X8AVFWmMhQa2zTH',
'NeutronMetadataProxySharedSecret': 'Q2YgUCwmBkYdqsdhhCF4hbghu',