'hieradata/secure_system.yaml' is not updated after admin password change

Bug #1995413 reported by Li Zhu
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
StarlingX
Fix Released
Medium
Li Zhu

Bug Description

Brief Description
-------------
After admin password change, check '/opt/platform/puppet/22.12/hieradata/secure_system.yaml' file. It is not updated with the new password.

Severity
------
Major

Steps to Reproduce
-------------
1. Change the admin password.
$ openstack --os-username 'admin' --os-password '<old password>' --os-project-name admin --os-auth-url <url> --os-user-domain-name Default --os-project-domain-name Default --os-identity-api-version 3 --os-interface internal --os-region-name RegionOne user password set --os-region-name RegionOne --password '<new password>' --original-password '<old password>'
2. Check the password is updated or not.
$ keyring get CGCS admin
<new password>
3. Verify puppet files are updated with new password.
$ sudo cat /opt/platform/puppet/22.12/hieradata/secure_system.yaml | grep -F '<new password>' --color=never

Expected Behavior
------------------
/opt/platform/puppet/22.12/hieradata/secure_system.yaml should show updated password in place of old password.

Actual Behavior
----------------
/opt/platform/puppet/22.12/hieradata/secure_system.yaml is not updated with the new password.

Reproducibility
---------------
Reproducible

System Configuration
--------------------
Standard system

SW_VERSION="22.12"
BUILD_TARGET="Host Installer"
BUILD_TYPE="Formal"
BUILD_ID="2022-10-20_18-00-10"
SRC_BUILD_ID="173"JOB="wrcp-master-debian"

Last Pass
---------
On CentOS:
Software Version:22.12
Patches:None
Job:WRCP_Dev_Build
Build Id:2022-10-13_18-00-06
Ceph Version:14.2.22
Kubernetes Version:1.23.1

On Debian:
Software Version: 22.12
Patches:None
Job:wrcp-master-debia
Build Id:2022-09-08_18-00-07
Ceph Version:Development
Kubernetes Version:1.23.1

Test Activity
----------
Regression Testing

Workaround
----------
N/A

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to config (master)

Fix proposed to branch: master
Review: https://review.opendev.org/c/starlingx/config/+/863173

Changed in starlingx:
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to config (master)

Reviewed: https://review.opendev.org/c/starlingx/config/+/863173
Committed: https://opendev.org/starlingx/config/commit/1d347b81cbcc0fdc2e54abadff24aecc2ddcd2b0
Submitter: "Zuul (22348)"
Branch: master

commit 1d347b81cbcc0fdc2e54abadff24aecc2ddcd2b0
Author: Li Zhu <email address hidden>
Date: Tue Nov 1 14:28:25 2022 -0400

    Hieradata is not updated after admin password change

    After admin password change , check
    '/opt/platform/puppet/22.06/hieradata/secure_system.yaml' file. It is
    not updated with the new password.

    This issue was imported from this code change:
    https://review.opendev.org/c/starlingx/config/+/858442

    Test Plan:
    PASS: After admin password change, the 'hieradata/secure_system.yaml' is
          updated.

    Closes-bug: 1995413

    Signed-off-by: Li Zhu <email address hidden>
    Change-Id: I3cb54546ab5c6e5ef7292d041d26da6a42896ddf

Changed in starlingx:
status: In Progress → Fix Released
Ghada Khalil (gkhalil)
Changed in starlingx:
importance: Undecided → Medium
assignee: nobody → Li Zhu (lzhu1)
tags: added: stx.8.0 stx.config stx.security
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.