Bug 1880377
| Summary: | [ansible-freeipa] After changing the vault type from symmetric to asymmetric, Salt is present in the asymmetric vault. | ||
|---|---|---|---|
| Product: | Red Hat Enterprise Linux 8 | Reporter: | Varun Mylaraiah <mvarun> |
| Component: | ansible-freeipa | Assignee: | Rafael Jeffman <rjeffman> |
| Status: | CLOSED ERRATA | QA Contact: | ipa-qe <ipa-qe> |
| Severity: | unspecified | Docs Contact: | |
| Priority: | high | ||
| Version: | 8.3 | CC: | pcech, rjeffman, twoerner |
| Target Milestone: | rc | Keywords: | Triaged |
| Target Release: | 8.0 | Flags: | pm-rhel:
mirror+
|
| Hardware: | x86_64 | ||
| OS: | Linux | ||
| Whiteboard: | |||
| Fixed In Version: | Doc Type: | If docs needed, set a value | |
| Doc Text: | Story Points: | --- | |
| Clone Of: | Environment: | ||
| Last Closed: | 2021-05-18 15:51:18 UTC | Type: | Bug |
| Regression: | --- | Mount Type: | --- |
| Documentation: | --- | CRM: | |
| Verified Versions: | Category: | --- | |
| oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
| Cloudforms Team: | --- | Target Upstream Version: | |
| Embargoed: | |||
There is an upstream PR for this issue: https://github.com/freeipa/ansible-freeipa/pull/468 Upstream PR was merged. Verified
Version:
ansible-freeipa-0.3.2-1.el8.noarch
ipa-server-4.9.0-1.module+el8.4.0+9274+259c83ee.x86_64
Passed ansible_freeipa_tests/vault_module.py::TestMiscellaneousVaultTests::()::test_symmetric_to_asymmetric_vault
------------------------------ Captured log call -------------------------------
channel.py 1212 DEBUG [chan 332] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 332] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 332 opened.
transport.py 318 INFO RUN ['kinit', 'admin']
transport.py 519 DEBUG RUN ['kinit', 'admin']
channel.py 1212 DEBUG [chan 332] Sesch channel 332 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Password for admin:
channel.py 1212 DEBUG [chan 332] EOF received (332)
channel.py 1212 DEBUG [chan 332] EOF sent (332)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 333] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 333] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 333 opened.
transport.py 318 INFO RUN ['ipa', 'vault-show', 'symm_to_asymm']
transport.py 519 DEBUG RUN ['ipa', 'vault-show', 'symm_to_asymm']
channel.py 1212 DEBUG [chan 333] Sesch channel 333 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Vault name: symm_to_asymm
transport.py 563 DEBUG Type: symmetric
transport.py 563 DEBUG Salt: chzRplkt/KFk3j1AinMXSfE9NdmpN+pCfkOiq577igU=
transport.py 563 DEBUG Owner users: admin
transport.py 563 DEBUG Vault user: admin
channel.py 1212 DEBUG [chan 333] EOF received (333)
channel.py 1212 DEBUG [chan 333] EOF sent (333)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 334] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 334] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 334 opened.
transport.py 318 INFO RUN ['kdestroy', '-A']
transport.py 519 DEBUG RUN ['kdestroy', '-A']
channel.py 1212 DEBUG [chan 334] Sesch channel 334 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
channel.py 1212 DEBUG [chan 334] EOF received (334)
channel.py 1212 DEBUG [chan 334] EOF sent (334)
transport.py 217 DEBUG Exit code: 0
transport.py 293 INFO WRITE inventory/vault.hosts
sftp.py 158 DEBUG [chan 0] open(b'inventory/vault.hosts', 'wb')
sftp.py 158 DEBUG [chan 0] open(b'inventory/vault.hosts', 'wb') -> 00000000
sftp.py 158 DEBUG [chan 0] close(00000000)
transport.py 329 INFO PUT vault_module.yml
sftp.py 158 DEBUG [chan 0] open(b'vault_module.yml', 'wb')
sftp.py 158 DEBUG [chan 0] open(b'vault_module.yml', 'wb') -> 00000000
sftp.py 158 DEBUG [chan 0] close(00000000)
sftp.py 158 DEBUG [chan 0] stat(b'vault_module.yml')
channel.py 1212 DEBUG [chan 95] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 95] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 95 opened.
transport.py 318 INFO RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/vault.hosts', 'vault_module.yml']
transport.py 519 DEBUG RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/vault.hosts', 'vault_module.yml']
channel.py 1212 DEBUG [chan 95] Sesch channel 95 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG ansible-playbook 2.9.17
transport.py 563 DEBUG config file = /root/ansible.cfg
transport.py 563 DEBUG configured module search path = ['/root/ansible-freeipa/plugins/modules', '/usr/share/ansible/plugins/modules']
transport.py 563 DEBUG ansible python module location = /usr/lib/python3.6/site-packages/ansible
transport.py 563 DEBUG executable location = /usr/bin/ansible-playbook
transport.py 563 DEBUG python version = 3.6.8 (default, Dec 7 2020, 09:56:35) [GCC 8.4.1 20200928 (Red Hat 8.4.1-1)]
transport.py 563 DEBUG Using /root/ansible.cfg as config file
transport.py 563 DEBUG Skipping callback 'yaml', as we already have a stdout callback.
transport.py 563 DEBUG
transport.py 563 DEBUG PLAYBOOK: vault_module.yml *****************************************************
transport.py 563 DEBUG 1 plays in vault_module.yml
transport.py 563 DEBUG
transport.py 563 DEBUG PLAY [Playbook to ensure symmetric vault changes to asymmetric type.] **********
transport.py 563 DEBUG
transport.py 563 DEBUG TASK [Gathering Facts] *********************************************************
transport.py 563 DEBUG task path: /root/vault_module.yml:2
transport.py 563 DEBUG ok: [master.ipadomain.test]
transport.py 563 DEBUG META: ran handlers
transport.py 563 DEBUG
transport.py 563 DEBUG TASK [ipavault] ****************************************************************
transport.py 563 DEBUG task path: /root/vault_module.yml:6
transport.py 563 DEBUG changed: [master.ipadomain.test] => {"changed": true}
transport.py 563 DEBUG META: ran handlers
transport.py 563 DEBUG META: ran handlers
transport.py 563 DEBUG
transport.py 563 DEBUG PLAY RECAP *********************************************************************
transport.py 563 DEBUG master.ipadomain.test : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0
transport.py 563 DEBUG
channel.py 1212 DEBUG [chan 95] EOF received (95)
channel.py 1212 DEBUG [chan 95] EOF sent (95)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 335] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 335] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 335 opened.
transport.py 318 INFO RUN ['kinit', 'admin']
transport.py 519 DEBUG RUN ['kinit', 'admin']
channel.py 1212 DEBUG [chan 335] Sesch channel 335 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Password for admin:
channel.py 1212 DEBUG [chan 335] EOF received (335)
channel.py 1212 DEBUG [chan 335] EOF sent (335)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 336] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 336] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 336 opened.
transport.py 318 INFO RUN ['ipa', 'vault-show', 'symm_to_asymm']
transport.py 519 DEBUG RUN ['ipa', 'vault-show', 'symm_to_asymm']
channel.py 1212 DEBUG [chan 336] Sesch channel 336 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Vault name: symm_to_asymm
transport.py 563 DEBUG Type: asymmetric
transport.py 563 DEBUG Public key: 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
transport.py 563 DEBUG Owner users: admin
transport.py 563 DEBUG Vault user: admin
channel.py 1212 DEBUG [chan 336] EOF received (336)
channel.py 1212 DEBUG [chan 336] EOF sent (336)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 337] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 337] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 337 opened.
transport.py 318 INFO RUN ['kdestroy', '-A']
transport.py 519 DEBUG RUN ['kdestroy', '-A']
channel.py 1212 DEBUG [chan 337] Sesch channel 337 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
channel.py 1212 DEBUG [chan 337] EOF received (337)
channel.py 1212 DEBUG [chan 337] EOF sent (337)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 338] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 338] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 338 opened.
transport.py 318 INFO RUN ['kinit', 'admin']
transport.py 519 DEBUG RUN ['kinit', 'admin']
channel.py 1212 DEBUG [chan 338] Sesch channel 338 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Password for admin:
channel.py 1212 DEBUG [chan 338] EOF received (338)
channel.py 1212 DEBUG [chan 338] EOF sent (338)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 339] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 339] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 339 opened.
transport.py 318 INFO RUN ['ipa', 'vault-show', 'symm_to_asymm']
transport.py 519 DEBUG RUN ['ipa', 'vault-show', 'symm_to_asymm']
channel.py 1212 DEBUG [chan 339] Sesch channel 339 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
transport.py 563 DEBUG Vault name: symm_to_asymm
transport.py 563 DEBUG Type: asymmetric
transport.py 563 DEBUG Public key: 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
transport.py 563 DEBUG Owner users: admin
transport.py 563 DEBUG Vault user: admin
channel.py 1212 DEBUG [chan 339] EOF received (339)
channel.py 1212 DEBUG [chan 339] EOF sent (339)
transport.py 217 DEBUG Exit code: 0
channel.py 1212 DEBUG [chan 340] Max packet in: 32768 bytes
channel.py 1212 DEBUG [chan 340] Max packet out: 32768 bytes
transport.py 1819 DEBUG Secsh channel 340 opened.
transport.py 318 INFO RUN ['kdestroy', '-A']
transport.py 519 DEBUG RUN ['kdestroy', '-A']
channel.py 1212 DEBUG [chan 340] Sesch channel 340 request ok
transport.py 563 DEBUG -bash: line 1: cd: /root/multihost_tests: No such file or directory
transport.py 563 DEBUG -bash: line 2: /root/multihost_tests/env.sh: No such file or directory
channel.py 1212 DEBUG [chan 340] EOF received (340)
channel.py 1212 DEBUG [chan 340] EOF sent (340)
transport.py 217 DEBUG Exit code: 0
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory (ansible-freeipa bug fix and enhancement update), and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHEA-2021:1860 |
Description of problem: In Vault module, after changing the vault type from symmetric to asymmetric, Salt is till present in the asymmetric vault Version-Release number of selected component (if applicable): ansible-freeipa-0.1.12-6.el8.noarch Steps to Reproduce: --- - name: Playbook to ensure symmetric vault changes to asymmetric type. hosts: ipaserver tasks: - ipavault: ipaadmin_password: <XXXXXPasswordXXXXX> name: symm_to_asymm vault_type: asymmetric public_key: "{{ lookup('file', 'public.pem') | b64encode }}" RUN ['ansible-playbook', '--ssh-extra-args="-o StrictHostKeyChecking=no"', '-vv', '-i', 'inventory/vault.hosts', 'vault_module.yml'] ansible-playbook 2.9.12 config file = /root/ansible.cfg configured module search path = ['/root/ansible-freeipa/plugins/modules', '/usr/share/ansible/plugins/modules'] ansible python module location = /usr/lib/python3.6/site-packages/ansible executable location = /usr/bin/ansible-playbook python version = 3.6.8 (default, Aug 18 2020, 08:33:21) [GCC 8.3.1 20191121 (Red Hat 8.3.1-5)] Using /root/ansible.cfg as config file PLAYBOOK: vault_module.yml ***************************************************** 1 plays in vault_module.yml PLAY [Playbook to ensure symmetric vault changes to asymmetric type.] ********** TASK [Gathering Facts] ********************************************************* task path: /root/vault_module.yml:2 ok: [master.ipadomain.test] META: ran handlers TASK [ipavault] **************************************************************** task path: /root/vault_module.yml:6 changed: [master.ipadomain.test] => {"changed": true} META: ran handlers META: ran handlers PLAY RECAP ********************************************************************* master.ipadomain.test : ok=2 changed=1 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0 Actual results: [root@master ~]# ipa vault-show symm_to_asymm Vault name: symm_to_asymm Type: asymmetric Salt: J+OtIrV3o7AwX/200FzJfT6ovjh25bBTXXm7UOKUBHI= Public key: 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 Owner users: admin Vault user: admin Expected results: Salt should not present with asymmetric vault. Additional info: