Bug 1718940

Summary: tripleo-heat-templates: TripleO should configure server_certs_key_passphrase for Octavia
Product: Red Hat OpenStack Reporter: Nir Magnezi <nmagnezi>
Component: openstack-tripleo-heat-templatesAssignee: Nir Magnezi <nmagnezi>
Status: CLOSED ERRATA QA Contact: Bruna Bonguardo <bbonguar>
Severity: urgent Docs Contact:
Priority: medium    
Version: 13.0 (Queens)CC: cgoncalves, jjoyce, mburns, oblaut, ramishra, slinaber, ssmolyak, tvignaud
Target Milestone: z8Keywords: AutomationBlocker, Regression, Triaged, ZStream
Target Release: 13.0 (Queens)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-tripleo-heat-templates-8.3.1-55 Doc Type: No Doc Update
Doc Text:
Story Points: ---
Clone Of: 1718905 Environment:
Last Closed: 2019-09-03 16:55:34 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On: 1692830, 1718905, 1741524    
Bug Blocks: 1726261    

Description Nir Magnezi 2019-06-10 15:04:04 UTC 
+++ This bug was initially created as a clone of Bug #1718905 +++

Description of problem:
=======================
A recent change[1] to Octavia added a parameter named server_certs_key_passphrase, which means that we should generate a password for it to avoid using the default value.

OctaviaServerCertsKeyPassphrase should be added to the list of generated password/secrets.

[1] https://review.openstack.org/#/q/I06d329ca53bc36bd27f7870ae7c7ca0cf18575b2
Comment 5 Nir Magnezi 2019-06-22 22:04:53 UTC 
This needs further work. More details at bug 1723051.
Comment 11 Nir Magnezi 2019-07-02 13:17:36 UTC 
need further work, see bug 1726261.
Comment 21 errata-xmlrpc 2019-09-03 16:55:34 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHBA-2019:2624