auth_encryption_key parameter is overwritten at every puppet run
Bug #1249280 reported by
Simon Pasquier
This bug affects 2 people
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
puppet-heat |
Fix Released
|
Medium
|
François Charlier | ||
Havana |
Fix Released
|
Medium
|
Unassigned |
Bug Description
Every time, the heat::engine manifest is executed, it generates a new value for auth_encryption
The problem is that heat_config [0] is always executed so the 'onlyif' condition of heat-encryption
[0] https:/
[1] https:/
Changed in puppet-heat: | |
assignee: | Benedikt Trefzer (benedikt-trefzer) → Emilien Macchi (emilienm) |
Changed in puppet-heat: | |
importance: | Undecided → Medium |
Changed in puppet-heat: | |
milestone: | none → 3.0.0 |
Changed in puppet-heat: | |
milestone: | 3.0.0 → none |
Changed in puppet-heat: | |
milestone: | none → 4.0.0 |
status: | Fix Committed → Fix Released |
To post a comment you must log in.
I can confirm this behaviour.
the 'onlyif' statement is correct. but for each puppetrun the key is overwritten with the pattern:
notice: /Stage[ main]/Heat: :Engine/ Heat_config[ DEFAULT/ auth_encryption _key]/value: value changed '27341f3aa61cdb 4ec5d0ae62e7803 838' to '%ENCRYPTION_KEY%' main]/Heat: :Engine/ Heat_config[ DEFAULT/ auth_encryption _key]: Scheduling refresh of Service[ heat-engine] main]/Heat: :Engine/ Exec[heat- encryption- key-replacement ]/returns: executed successfully
info: /Stage[
notice: /Stage[
I suggest, to remove the automatic generation of auth_encryption _key, and use a parameter.
This also makes it possible to setup more than one heat-engine, or to move ist to another node etc.