Attribute needed to configure secrets data bag

Bug #1288784 reported by Richard Theis
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack + Chef
Fix Released
High
Craig Tracey

Bug Description

The OpenStack cookbooks support 4 data bags (service_passwords, db_passwords, user_passwords and secrets). However only three of the data bag names can be overridden via an attribute. The missing attribute is for the secrets data bag. Without this attribute, all OpenStack environments managed by a single chef server must share the same secrets data bag.

Changed in openstack-chef:
assignee: nobody → Craig Tracey (craigtracey)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to cookbook-openstack-common (master)

Fix proposed to branch: master
Review: https://review.openstack.org/80122

Changed in openstack-chef:
status: New → In Progress
Changed in openstack-chef:
milestone: none → havana-rc1
importance: Undecided → High
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to cookbook-openstack-common (master)

Reviewed: https://review.openstack.org/80122
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-common/commit/?id=e35612fc4c9f5b0204e9d5a551f87249e5eb47d0
Submitter: Jenkins
Branch: master

commit e35612fc4c9f5b0204e9d5a551f87249e5eb47d0
Author: Craig Tracey <email address hidden>
Date: Wed Mar 12 20:08:25 2014 -0400

    Provide a get_secret library method

    Currently we do not provide a mechanism for a user to specify an
    alternate 'secrets' data bag. By adding a get_secret method, we can
    support this feature request without breaking other dependent
    cookbooks. Once this method is accepted, we can retrofit all calls
    to 'secret' with 'get_secret'.

    New tests added and all tests pass.

    Changelog and metadata updated to semver 8.3.0.

    Change-Id: Id2adaf7bc197b3d7fd94c5c9614fda145a8501f0
    Closes-Bug: #1288784

Changed in openstack-chef:
status: In Progress → Fix Released
Changed in openstack-chef:
milestone: havana-rc1 → havana-stable
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-telemetry (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84574

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-telemetry (master)

Reviewed: https://review.openstack.org/84574
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-telemetry/commit/?id=42df38891b58e8f9420489252df164c54557786c
Submitter: Jenkins
Branch: master

commit 42df38891b58e8f9420489252df164c54557786c
Author: Luis A. Garcia <email address hidden>
Date: Tue Apr 1 15:43:44 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-block-storage (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84748

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-compute (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84752

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-identity (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84754

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-image (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84756

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-network (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84759

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix proposed to cookbook-openstack-orchestration (master)

Related fix proposed to branch: master
Review: https://review.openstack.org/84764

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-orchestration (master)

Reviewed: https://review.openstack.org/84764
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-orchestration/commit/?id=646a833740e617a80e6bdd5eccf00e69e535c2f3
Submitter: Jenkins
Branch: master

commit 646a833740e617a80e6bdd5eccf00e69e535c2f3
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:32:21 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-identity (master)

Reviewed: https://review.openstack.org/84754
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-identity/commit/?id=b144f0ee4aec2ddcaf7e058a8ebcdeba64baa06a
Submitter: Jenkins
Branch: master

commit b144f0ee4aec2ddcaf7e058a8ebcdeba64baa06a
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:25:26 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-image (master)

Reviewed: https://review.openstack.org/84756
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-image/commit/?id=d87836f863c3104d4ace8eb811f1e0981514620f
Submitter: Jenkins
Branch: master

commit d87836f863c3104d4ace8eb811f1e0981514620f
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:27:23 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-network (master)

Reviewed: https://review.openstack.org/84759
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-network/commit/?id=575f440d455c121c789389c62a3f496b5f080835
Submitter: Jenkins
Branch: master

commit 575f440d455c121c789389c62a3f496b5f080835
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:29:31 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-block-storage (master)

Reviewed: https://review.openstack.org/84748
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-block-storage/commit/?id=f177e019dca9a17ef45c3459440cd10069de4bee
Submitter: Jenkins
Branch: master

commit f177e019dca9a17ef45c3459440cd10069de4bee
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:14:02 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Related fix merged to cookbook-openstack-compute (master)

Reviewed: https://review.openstack.org/84752
Committed: https://git.openstack.org/cgit/stackforge/cookbook-openstack-compute/commit/?id=576d3b0735a43a2158e3266b6ba331139465d50b
Submitter: Jenkins
Branch: master

commit 576d3b0735a43a2158e3266b6ba331139465d50b
Author: Luis A. Garcia <email address hidden>
Date: Wed Apr 2 08:19:50 2014 -0700

    Use get_secret instead of secret

    The new get_secret method allows the 'secrets' databag to be renamed,
    just like all other databags.

    Change-Id: Ic8be5d19a112d78e22716c0cd571efc7186ac9ce
    Related-Bug: #1288784

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/cookbook-openstack-common ocata-eol

This issue was fixed in the openstack/cookbook-openstack-common ocata-eol release.

To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.