From d440758259b007c277fc9fbed972585d4a30fa88 Mon Sep 17 00:00:00 2001
From: ramishra <ramishra@redhat.com>
Date: Fri, 19 Mar 2021 07:38:33 +0530
Subject: [PATCH] Don't allow rotation of HeatAuthEncryptionKey

Heat does not support rotation of auth_encryption_key
for existing deployments with heat stacks. Once this
key has been rotated exisiting stacks can't be updated
or even deleted. Let's not allow them to be changed.

Change-Id: I19c1d166ca72465fd4ae3dad46de77bb095f73d4
(cherry picked from commit 5db2ab20405a3406f208e56dfec0493e93aa0029)
---
 tripleo_common/constants.py | 1 +
 1 file changed, 1 insertion(+)

diff --git a/tripleo_common/constants.py b/tripleo_common/constants.py
index 4c21dbe88..5a2cc7fcd 100644
--- a/tripleo_common/constants.py
+++ b/tripleo_common/constants.py
@@ -159,6 +159,7 @@ DO_NOT_ROTATE_LIST = (
     'CephClusterFSID',
     'CephManilaClientKey',
     'CephRgwKey',
+    'HeatAuthEncryptionKey',
 )
 
 PLAN_NAME_PATTERN = '^[a-zA-Z0-9-]+$'