In addition to generating base64-encoded passwords when
EnableMysqlAuthEd25519 is set [1], we need to encode the
password part of the database URI in a way that can be
decoded by oslo.db. This is then used by tripleo heat
templates [2] to generate appropriate hiera keys.
Let tripleo-common generate a pair of keys
<service>Password and <service>PasswordDatabase to
generate base64-encoded passwords, and RFC-1738-encoded
passwords for URI. The former is still used as before
to create users in the database, and the latter is used
by oslo.db for connection to the database.
Tested by deploying a standalone, undercloud and HA overcloud
with and without EnableMysqlAuthEd25519. Password rotation
with tripleo_passwords_rotate is also supported.
Reviewed: https:/ /review. opendev. org/c/openstack /tripleo- common/ +/833615 /opendev. org/openstack/ tripleo- common/ commit/ 0cf9c1270203dbd 796212688b43ea8 90607403c3
Committed: https:/
Submitter: "Zuul (22348)"
Branch: master
commit 0cf9c1270203dbd 796212688b43ea8 90607403c3
Author: Damien Ciabrini <email address hidden>
Date: Mon Mar 14 12:15:05 2022 +0100
Generate database URI for ed25519 passwords
In addition to generating base64-encoded passwords when AuthEd25519 is set [1], we need to encode the
EnableMysql
password part of the database URI in a way that can be
decoded by oslo.db. This is then used by tripleo heat
templates [2] to generate appropriate hiera keys.
Let tripleo-common generate a pair of keys Password and <service> PasswordDatabas e to
<service>
generate base64-encoded passwords, and RFC-1738-encoded
passwords for URI. The former is still used as before
to create users in the database, and the latter is used
by oslo.db for connection to the database.
Tested by deploying a standalone, undercloud and HA overcloud Ed25519. Password rotation passwords_ rotate is also supported.
with and without EnableMysqlAuth
with tripleo_
[1] I00d3d2a43d08d3 d317a25c7ecb54d 197e36a8f93 28453e2b5857967 893996cf552
[2] I2e2cd7256700b7
Related-Bug: #1960271
Change-Id: Ic7ff36a5f3f4ec eeb6c8a338093e9 56b7db00533