Bug 1631702 - [OSP14] custom plans/derived_param workflow trigger unwanted passwords changes during a redeploy
Summary: [OSP14] custom plans/derived_param workflow trigger unwanted passwords change...
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: python-tripleoclient
Version: 14.0 (Rocky)
Hardware: All
OS: Linux
high
high
Target Milestone: beta
: 14.0 (Rocky)
Assignee: Michele Baldessari
QA Contact: pkomarov
URL:
Whiteboard:
Depends On: 1624462
Blocks:
TreeView+ depends on / blocked
 
Reported: 2018-09-21 10:17 UTC by Michele Baldessari
Modified: 2021-12-10 17:47 UTC (History)
9 users (show)

Fixed In Version: python-tripleoclient-10.5.1-0.20180906012842.el7ost
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1624462
Environment:
Last Closed: 2019-01-11 11:53:20 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Launchpad 1790580 0 None None None 2018-09-21 10:17:42 UTC
OpenStack gerrit 599826 0 None MERGED Passwords mismatches when using custom plan env 2020-11-26 16:00:13 UTC
Red Hat Issue Tracker OSP-11662 0 None None None 2021-12-10 17:47:37 UTC
Red Hat Product Errata RHEA-2019:0045 0 None None None 2019-01-11 11:53:28 UTC

Comment 6 pkomarov 2018-11-15 09:19:07 UTC
Verified,
(undercloud) [stack@undercloud-0 ~]$ cat core_puddle_version 
2018-11-07.2

(undercloud) [stack@undercloud-0 ~]$ rpm -qa|grep python-tripleoclient
python-tripleoclient-10.6.1-0.20181010222404.8c8f259.el7ost.noarch
python-tripleoclient-heat-installer-10.6.1-0.20181010222404.8c8f259.el7ost.noarch

openstack overcloud plan export --output-file OC_plan overcloud
...
undercloud) [stack@undercloud-0 ~]$ ./overcloud_deploy.sh_plan_test
Removing the current plan files
Uploading new plan files
Plan updated.
Processing templates in the directory /tmp/tripleoclient-qIBeOE/tripleo-heat-templates
Invoking workflow (tripleo.derive_params.v1.derive_parameters) specified in plan-environment file
(undercloud) [stack@undercloud-0 ~]$ openstack stack list
+--------------------------------------+------------+----------------------------------+-----------------+----------------------+--------------+
| ID                                   | Stack Name | Project                          | Stack Status    | Creation Time        | Updated Time |
+--------------------------------------+------------+----------------------------------+-----------------+----------------------+--------------+
| c2e62449-3d01-4e77-87df-0a3524e66f63 | overcloud  | 6dac83aa8f104d788ec4b801d3a01608 | CREATE_COMPLETE | 2018-11-12T14:22:24Z | None         |

undercloud) [stack@undercloud-0 ~]$ openstack overcloud plan export --output-file OC_plan overcloud
Exporting plan overcloud...
https://192.168.24.2:13808/v1/AUTH_6dac83aa8f104d788ec4b801d3a01608/plan-exports/overcloud.tar.gz?temp_url_sig=b92ee9a4d6568c2ac5c83b52a1d3c222e69b9400&temp_url_expires=1542275383

(undercloud) [stack@undercloud-0 ~]$ diff -u OC_plan_before/plan-environment.yaml OC_plan_after/plan-environment.yaml |grep -i -e pass -e pwd -e key -e cook -e secret |grep -e '^-' -e '^+'|grep -v 'Bag Attributes\|ssh_keys'
(undercloud) [stack@undercloud-0 ~]$ <- no difference in passwords was found.


Full comparrison below with new plan attributes added check : 

(undercloud) [stack@undercloud-0 ~]$ diff -y OC_plan_before/plan-environment.yaml OC_plan_after/plan-environment.yaml|grep -A999 'passwords:'
passwords:							passwords:
  AdminPassword: GIwZKedYKr4q1mf1gsP5l6KHv			  AdminPassword: GIwZKedYKr4q1mf1gsP5l6KHv
  AdminToken: p0r51IffgM88Yz56KXA6UB2ZW				  AdminToken: p0r51IffgM88Yz56KXA6UB2ZW
  AodhPassword: JrOFgYrkJTKeooPisMs7TJHSA			  AodhPassword: JrOFgYrkJTKeooPisMs7TJHSA
  BarbicanPassword: 3KfSOjVn6peM3n02piiDyABLj			  BarbicanPassword: 3KfSOjVn6peM3n02piiDyABLj
  BarbicanSimpleCryptoKek: auqXwYyuYRNYckpMlvAcHACNqLC3W8qMlq	  BarbicanSimpleCryptoKek: auqXwYyuYRNYckpMlvAcHACNqLC3W8qMlq
  CeilometerMeteringSecret: 7VW9DYYp5x2uj4jmCOg2QeYaI		  CeilometerMeteringSecret: 7VW9DYYp5x2uj4jmCOg2QeYaI
  CeilometerPassword: lkZM8uSdObbvKxcg31O51ZCyh			  CeilometerPassword: lkZM8uSdObbvKxcg31O51ZCyh
  CephAdminKey: AQD43udbAAAAABAARtqNgV1AR/w6SBVR+TmAwQ==	  CephAdminKey: AQD43udbAAAAABAARtqNgV1AR/w6SBVR+TmAwQ==
  CephClientKey: AQD43udbAAAAABAAf7+O9ZkV4dOz4b74B3OHrQ==	  CephClientKey: AQD43udbAAAAABAAf7+O9ZkV4dOz4b74B3OHrQ==
  CephClusterFSID: 47c4f87c-e586-11e8-87fb-525400925071		  CephClusterFSID: 47c4f87c-e586-11e8-87fb-525400925071
  CephManilaClientKey: AQD43udbAAAAABAA2gwTlWxOh/WOuQnL5WdW5w	  CephManilaClientKey: AQD43udbAAAAABAA2gwTlWxOh/WOuQnL5WdW5w
  CephMdsKey: AQD43udbAAAAABAA3fRlWo9c6fikn2JrWFMVjA==		  CephMdsKey: AQD43udbAAAAABAA3fRlWo9c6fikn2JrWFMVjA==
  CephMonKey: AQD43udbAAAAABAAJU7Hv2XjoT1XAnWSAE//+w==		  CephMonKey: AQD43udbAAAAABAAJU7Hv2XjoT1XAnWSAE//+w==
  CephRgwKey: AQD43udbAAAAABAA4hnVutwtV2qAza/5tFWOHQ==		  CephRgwKey: AQD43udbAAAAABAA4hnVutwtV2qAza/5tFWOHQ==
  CinderPassword: XdrPp5lUhudhLngEUTemHxFxq			  CinderPassword: XdrPp5lUhudhLngEUTemHxFxq
  CongressPassword: CkhMBysTDsX9J6HESuGIJx6zF			  CongressPassword: CkhMBysTDsX9J6HESuGIJx6zF
  DesignatePassword: cV8vD2tefOHtTc4S4nzGqxf9g			  DesignatePassword: cV8vD2tefOHtTc4S4nzGqxf9g
  DesignateRndcKey: gI3t7TAGbf8l/uAAeb3+yL3/ibTOXNI4AfB79gq74	  DesignateRndcKey: gI3t7TAGbf8l/uAAeb3+yL3/ibTOXNI4AfB79gq74
  Ec2ApiPassword: cifAVWfOAs9e41RCLgaR7xs9e			  Ec2ApiPassword: cifAVWfOAs9e41RCLgaR7xs9e
  EtcdInitialClusterToken: V13y4gxuvQ0XiVBjvuNMWUfaO		  EtcdInitialClusterToken: V13y4gxuvQ0XiVBjvuNMWUfaO
  GlancePassword: btI93MJFbyWOqepxx2OES7fXf			  GlancePassword: btI93MJFbyWOqepxx2OES7fXf
  GnocchiPassword: RMAOtkNkPVRRkbfaUFyUbjthy			  GnocchiPassword: RMAOtkNkPVRRkbfaUFyUbjthy
  HAProxyStatsPassword: TBkJgEM3Ke4gtrm7HSxxr8lIL		  HAProxyStatsPassword: TBkJgEM3Ke4gtrm7HSxxr8lIL
  HeatAuthEncryptionKey: 5VRlfR8DZLsJu1e0H5YMYzFzxe0dyMNF	  HeatAuthEncryptionKey: 5VRlfR8DZLsJu1e0H5YMYzFzxe0dyMNF
  HeatPassword: aJoJ5loB6y0JmW3NiX1grcyPz			  HeatPassword: aJoJ5loB6y0JmW3NiX1grcyPz
  HeatStackDomainAdminPassword: hFNs6Hq9hUgpevZdTNY92lIhj	  HeatStackDomainAdminPassword: hFNs6Hq9hUgpevZdTNY92lIhj
  HorizonSecret: nwML5pF2vx					  HorizonSecret: nwML5pF2vx
  IronicPassword: 6asdEGYDARExnFHAK0VlOJwlJ			  IronicPassword: 6asdEGYDARExnFHAK0VlOJwlJ
  KeystoneCredential0: 5ydggwk9eYO9JCwEe__1Ml8NJZnWew9gkPManr	  KeystoneCredential0: 5ydggwk9eYO9JCwEe__1Ml8NJZnWew9gkPManr
  KeystoneCredential1: WvfC_Wbi0qzszYanlbtISJNWhO1eWK2YkAxADm	  KeystoneCredential1: WvfC_Wbi0qzszYanlbtISJNWhO1eWK2YkAxADm
  KeystoneFernetKey0: YarWvr4gw9iYfm9bZjjRdwqZnQrMqtQNZ01zGI8	  KeystoneFernetKey0: YarWvr4gw9iYfm9bZjjRdwqZnQrMqtQNZ01zGI8
  KeystoneFernetKey1: GF3RVxLliq8mMoOrjyzE1Lpt0isFImd0pD0uFJc	  KeystoneFernetKey1: GF3RVxLliq8mMoOrjyzE1Lpt0isFImd0pD0uFJc
  KeystoneFernetKeys:						  KeystoneFernetKeys:
    /etc/keystone/fernet-keys/0:				    /etc/keystone/fernet-keys/0:
      content: EfS4FNsjnzWFaZCWwfKiFFxjwTsV4XkhLPeXpef_K38=	      content: EfS4FNsjnzWFaZCWwfKiFFxjwTsV4XkhLPeXpef_K38=
    /etc/keystone/fernet-keys/1:				    /etc/keystone/fernet-keys/1:
      content: ngtIvTrzx3FemN7TlyTiykT0mMvI6HgMTCf2CSwhzis=	      content: ngtIvTrzx3FemN7TlyTiykT0mMvI6HgMTCf2CSwhzis=
  LibvirtTLSPassword: cos8oDSgCA17ljHLuVs70MMJd			  LibvirtTLSPassword: cos8oDSgCA17ljHLuVs70MMJd
  ManilaPassword: wvE1Ml9Xa9Tlm8BExWsDFJO9o			  ManilaPassword: wvE1Ml9Xa9Tlm8BExWsDFJO9o
  MigrationSshKey:						  MigrationSshKey:
    private_key: '-----BEGIN RSA PRIVATE KEY-----		    private_key: '-----BEGIN RSA PRIVATE KEY-----

      MIIEpQIBAAKCAQEA4FdMUCLsKz0i9x5nV423gY7MejyfVVnKWBG5hg5	      MIIEpQIBAAKCAQEA4FdMUCLsKz0i9x5nV423gY7MejyfVVnKWBG5hg5

      jhtPwc/LRfRvqqwSfEMHWG/TZOpF389wu71UT6RChtd5FTUKRU0LgVN	      jhtPwc/LRfRvqqwSfEMHWG/TZOpF389wu71UT6RChtd5FTUKRU0LgVN

      2VTyFtEPUrQgk9Dps/UKZc15borhSkjXipvq+Xa/GF9+0/CwwXIPDTu	      2VTyFtEPUrQgk9Dps/UKZc15borhSkjXipvq+Xa/GF9+0/CwwXIPDTu

      gdVdgNXXzbbFoJ5qedPxjSk6KwADgy1NLTrd/qVdWKr98w012zcbWYb	      gdVdgNXXzbbFoJ5qedPxjSk6KwADgy1NLTrd/qVdWKr98w012zcbWYb

      CNtG0OkFEXMUCy9sp5U9DafpTci4wlDQCpg+LlIVg8dwwlzP9F6V/dQ	      CNtG0OkFEXMUCy9sp5U9DafpTci4wlDQCpg+LlIVg8dwwlzP9F6V/dQ

      qUrNT7LTZ/phhlgjqkAYKxQuxQy7UblMLQBS+QIDAQABAoIBAQDGVsg	      qUrNT7LTZ/phhlgjqkAYKxQuxQy7UblMLQBS+QIDAQABAoIBAQDGVsg

      OeQZtxRXOb20EGa52eGYDUudpqKq8kYUwmkuwBy6eBD6LwqOtQS+0a/	      OeQZtxRXOb20EGa52eGYDUudpqKq8kYUwmkuwBy6eBD6LwqOtQS+0a/

      YhYEFXY11z5t4pCNXFBRRrV2SAYhPzKOafuuOXizDW/jqZbnuJr13B2	      YhYEFXY11z5t4pCNXFBRRrV2SAYhPzKOafuuOXizDW/jqZbnuJr13B2

      Slwtkn2iwgZe8Qa7MB/FVybRh0i48Ox3rIBrM2LZlurjrUaYmzToy7G	      Slwtkn2iwgZe8Qa7MB/FVybRh0i48Ox3rIBrM2LZlurjrUaYmzToy7G

      XpUMW9nr7KrUE+DV/6I8SVpbfY3yQpKWqEJk5xDzXwzlZyYCeAZ86RY	      XpUMW9nr7KrUE+DV/6I8SVpbfY3yQpKWqEJk5xDzXwzlZyYCeAZ86RY

      L/6UKsiQdjWbpGHqhVz3h5Gwb+crI4DFhg6aNzyRRDtKrCvTfIcsbkv	      L/6UKsiQdjWbpGHqhVz3h5Gwb+crI4DFhg6aNzyRRDtKrCvTfIcsbkv

      gmgxD8aBAoGBAPOVuB+/am93Fd0ucEz4vPMDQI4RBzf6/dxblaVfXpB	      gmgxD8aBAoGBAPOVuB+/am93Fd0ucEz4vPMDQI4RBzf6/dxblaVfXpB

      yCyq6K3vML+eUragJLxF83oqnFKaEUuZm+kOxk+y6VKFm7cU089P1so	      yCyq6K3vML+eUragJLxF83oqnFKaEUuZm+kOxk+y6VKFm7cU089P1so

      VauQu4XXwBM1I/FflPIilbD6s0kuavd+/bDWQ+puOLZ5o2hknLSSYC4	      VauQu4XXwBM1I/FflPIilbD6s0kuavd+/bDWQ+puOLZ5o2hknLSSYC4

      fIiximszDrlZIl0l5mZMUiwtPAMH3uSjsiQqe0fXSV8SQuTjLpTEZVs	      fIiximszDrlZIl0l5mZMUiwtPAMH3uSjsiQqe0fXSV8SQuTjLpTEZVs

      tzPAlXX6gfsCGSvIHfhZtm6B5TofOpXoYd8FjR/S3kZ0SEVlCgHozCA	      tzPAlXX6gfsCGSvIHfhZtm6B5TofOpXoYd8FjR/S3kZ0SEVlCgHozCA

      BnzjmkimTw/udeV35hcMErp0tEpCRESHuM+YSvhRAoGAMWkXdmkvv/i	      BnzjmkimTw/udeV35hcMErp0tEpCRESHuM+YSvhRAoGAMWkXdmkvv/i

      77ijKa5Olo51XHO/gVI9LnJDpu07Ei+yCU2J8W5ppxUIlj8Z9I8D+q4	      77ijKa5Olo51XHO/gVI9LnJDpu07Ei+yCU2J8W5ppxUIlj8Z9I8D+q4

      I3h5xcT3C2RK1/KDnLQHT+1AxF0ZHlEYpbqwL1A6iCrpZZcL8aoOT14	      I3h5xcT3C2RK1/KDnLQHT+1AxF0ZHlEYpbqwL1A6iCrpZZcL8aoOT14

      thBgqnc9TdaSzSRLnV1r4TECgYEA13PZ+U/EHZHasqUxMc2gbXrw3E2	      thBgqnc9TdaSzSRLnV1r4TECgYEA13PZ+U/EHZHasqUxMc2gbXrw3E2

      0om/fjbNZYNafa7csjWGKVJNWeig9gNDZpdl/RmeDbItLkUAniHdA77	      0om/fjbNZYNafa7csjWGKVJNWeig9gNDZpdl/RmeDbItLkUAniHdA77

      0k5QV/RqChfYsxFRw8zoO75vjIWEeDdutlGGezz+oqBWPAsEx6rQsnJ	      0k5QV/RqChfYsxFRw8zoO75vjIWEeDdutlGGezz+oqBWPAsEx6rQsnJ

      8mdImwECgYEAvYKwYT5GTIQ7blbv4XwTyeZM5/Z4SSKo8/gTYX0rr3A	      8mdImwECgYEAvYKwYT5GTIQ7blbv4XwTyeZM5/Z4SSKo8/gTYX0rr3A

      ezcqxUziR0YH34yTJDd3q3NPIVMl+AWDoCALVpTr7PUPASRH4vtxrB5	      ezcqxUziR0YH34yTJDd3q3NPIVMl+AWDoCALVpTr7PUPASRH4vtxrB5

      3gfyXfDI+CaHFUpyj/W9Yt8YcT1xDM5slIxEfrRaQQ53+0/wxgVbTS4	      3gfyXfDI+CaHFUpyj/W9Yt8YcT1xDM5slIxEfrRaQQ53+0/wxgVbTS4

      -----END RSA PRIVATE KEY-----				      -----END RSA PRIVATE KEY-----

      '								      '
    public_key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgV0xQI	    public_key: ssh-rsa AAAAB3NzaC1yc2EAAAADAQABAAABAQDgV0xQI
      Generated by TripleO					      Generated by TripleO
  MistralPassword: jtiuQS1eLTlitRNJlixaDdOe6			  MistralPassword: jtiuQS1eLTlitRNJlixaDdOe6
  MysqlClustercheckPassword: ZqQNYit73FxK0xu0ByxN8KCP1		  MysqlClustercheckPassword: ZqQNYit73FxK0xu0ByxN8KCP1
  MysqlRootPassword: SYEpk5TI2t					  MysqlRootPassword: SYEpk5TI2t
  NeutronMetadataProxySharedSecret: NYyHwkBwi5VWWNPBL937RhLZa	  NeutronMetadataProxySharedSecret: NYyHwkBwi5VWWNPBL937RhLZa
  NeutronPassword: aRzyqFqTyH1xQKTzoiEg5YVG5			  NeutronPassword: aRzyqFqTyH1xQKTzoiEg5YVG5
  NotifyPassword: rZfHa3z63HpCYsWrKwrl18RM7			  NotifyPassword: rZfHa3z63HpCYsWrKwrl18RM7
  NovaPassword: jUVIzCFFPFkQ1XzOwYXPlaKru			  NovaPassword: jUVIzCFFPFkQ1XzOwYXPlaKru
  NovajoinPassword: VSV9uqp5ILgevpDU0p9xkLyBA			  NovajoinPassword: VSV9uqp5ILgevpDU0p9xkLyBA
  OctaviaCaKeyPassphrase: bKbz7cAiLkoFSGAPx6eU2sZ4G		  OctaviaCaKeyPassphrase: bKbz7cAiLkoFSGAPx6eU2sZ4G
  OctaviaHeartbeatKey: 6u6V3DDvQi0Ku2u9DPDhURNyT		  OctaviaHeartbeatKey: 6u6V3DDvQi0Ku2u9DPDhURNyT
  OctaviaPassword: d9dRMGC9zTWWQAUDYmPCeXgn6			  OctaviaPassword: d9dRMGC9zTWWQAUDYmPCeXgn6
  OpenDaylightPassword: oz4FLlY2sYJAN1ubdAZ0dPJCk		  OpenDaylightPassword: oz4FLlY2sYJAN1ubdAZ0dPJCk
  PacemakerRemoteAuthkey: OH3gDuH0JdvLru1U9RmcPjlvCe9k1b9tBLF	  PacemakerRemoteAuthkey: OH3gDuH0JdvLru1U9RmcPjlvCe9k1b9tBLF
  PankoPassword: 2v6HAOfEDYcevRuAsFNtXz1kb			  PankoPassword: 2v6HAOfEDYcevRuAsFNtXz1kb
  PcsdPassword: 1wJ9gEZUOjFGg9uV				  PcsdPassword: 1wJ9gEZUOjFGg9uV
  RabbitCookie: oFAlVMXyoDL1bvutmMHP				  RabbitCookie: oFAlVMXyoDL1bvutmMHP
  RabbitPassword: qqd93C33P0AAvLLAo9gcJIzgI			  RabbitPassword: qqd93C33P0AAvLLAo9gcJIzgI
  RedisPassword: x9JxO0KIGFZoGBxM6mOsKK1fx			  RedisPassword: x9JxO0KIGFZoGBxM6mOsKK1fx
  RpcPassword: cSUcibKNbjZsAuwsDxTdDopa8			  RpcPassword: cSUcibKNbjZsAuwsDxTdDopa8
  SaharaPassword: hOKKEu3sORHXQl2L7Y5YoIGt5			  SaharaPassword: hOKKEu3sORHXQl2L7Y5YoIGt5
  SnmpdReadonlyUserPassword: MRfx1SUH2nz8UDcHEc28C4zN5		  SnmpdReadonlyUserPassword: MRfx1SUH2nz8UDcHEc28C4zN5
  SwiftHashSuffix: MugZhwuw4sEKBk25WKOTI13Ag			  SwiftHashSuffix: MugZhwuw4sEKBk25WKOTI13Ag
  SwiftPassword: KfGT0gWePoFE6rGZUXUyoY2ra			  SwiftPassword: KfGT0gWePoFE6rGZUXUyoY2ra
  TackerPassword: 81lbgx2meroxB3twwI1ivUCUa			  TackerPassword: 81lbgx2meroxB3twwI1ivUCUa
  TrovePassword: stAiG833npuj8CbBYgcvRlAMl			  TrovePassword: stAiG833npuj8CbBYgcvRlAMl
  ZaqarPassword: HgNuQTmk3kGkQoqTnewTivFYV			  ZaqarPassword: HgNuQTmk3kGkQoqTnewTivFYV
template: overcloud.yaml					template: overcloud.yaml
version: 1.0							version: 1.0
							      >	workflow_parameters:
							      >	  tripleo.derive_params.v1.derive_parameters:
							      >	    hci_profile: nfv_default
							      >	    hci_profile_config:
							      >	      default:
							      >	        average_guest_cpu_utilization_percentage: 50
							      >	        average_guest_memory_size_in_mb: 2048
							      >	      few_large_vms:
							      >	        average_guest_cpu_utilization_percentage: 80
							      >	        average_guest_memory_size_in_mb: 4096
							      >	      many_small_vms:
							      >	        average_guest_cpu_utilization_percentage: 20
							      >	        average_guest_memory_size_in_mb: 1024
							      >	      nfv_default:
							      >	        average_guest_cpu_utilization_percentage: 90
							      >	        average_guest_memory_size_in_mb: 8192
							      >	    huge_page_allocation_percentage: 50
							      >	    num_phy_cores_per_numa_node_for_pmd: 1

Comment 8 errata-xmlrpc 2019-01-11 11:53:20 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2019:0045


Note You need to log in before you can comment on or make changes to this bug.