starlingx/config
Code Issues Proposed changes

Merge "cert-mon secret data migration for upgrade to stx5"

Browse Source
This commit is contained in:
Zuul 2021-02-01 20:18:45 +00:00 committed by Gerrit Code Review
commit ddf2dd3d55
1 changed files with 17 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
controllerconfig/controllerconfig/controllerconfig/upgrades/controller.py
View File

@ -800,6 +800,23 @@ def migrate_hiera_data(from_release, to_release, role=None):
secure_static_config.update({
'platform::helm::v2::db::postgresql::password': helmv2_db_pw
})
# update below static secure config
# sysinv::certmon::local_keystone_password
# sysinv::certmon::dc_keystone_password
sysinv_pass = utils.get_password_from_keyring('sysinv', 'services')
secure_static_config.update({
'sysinv::certmon::local_keystone_password': sysinv_pass
})
dc_pass = ''
if role == sysinv_constants.DISTRIBUTED_CLOUD_ROLE_SYSTEMCONTROLLER:
dc_pass = utils.get_password_from_keyring('dcmanager', 'services')
secure_static_config.update({
'sysinv::certmon::dc_keystone_password': dc_pass
})
with open(secure_static_file, 'w') as yaml_file:
yaml.dump(secure_static_config, yaml_file,
default_flow_style=False)