Add designate pool uuid to secrets

That UUID is supposed to be generated per deployment
instead of being hardcoded in role defaults

Change-Id: I452d23c650104b8dfe53f3477a3c3ef9c2c62b56
This commit is contained in:
Dmitriy Rabotyagov 2021-01-21 17:42:08 +02:00
parent 55f571b056
commit 973a65494b
3 changed files with 24 additions and 0 deletions

View File

@ -260,6 +260,7 @@ designate_oslomsg_rpc_password:
# Please also wire the appropriate userid in
# your user variables.
#designate_oslomsg_notify_password:
designate_pool_uuid:
designate_service_password:
## Tacker options

View File

@ -0,0 +1,12 @@
---
upgrade:
- |
For Designate ``designate_pool_uuid`` was hardcoded in os_designate role.
Now it's dynamically generated in secrets.yml and unique per deployment.
However, before upgrade you must set ``designate_pool_uuid`` to the
current uuid. Most likely it is `794ccc2c-d751-44fe-b57f-8894c9f5c842`
since that value has been defaulted in the role and it would remain the same
unless explicitly overwritten.
You can check your pool uuid with the command
`/openstack/venvs/designate-20.1.1.dev7/bin/designate-manage pool show_config`
that should be executed from the Designate venv.

View File

@ -85,6 +85,17 @@
tags:
- update-secrets
# TODO(noonedeadpunk): Remove after W cycle
- name: Define Designate pool id
lineinfile:
dest: "{{ openstack_config_dir }}/user_secrets.yml"
regexp: "^designate_pool_uuid"
line: "designate_pool_uuid: {{ designate_pool_uuid | default('794ccc2c-d751-44fe-b57f-8894c9f5c842') }}"
when:
- not (user_secrets.stdout | regex_search('((^|\n)designate_pool_uuid)'))
tags:
- update-secrets
- name: Generate new secrets
shell: "{{ repo_root_dir }}/scripts/pw-token-gen.py --file {{ openstack_config_dir }}/user_secrets.yml"
tags: