diff options
| author |   Marco Platania <platania@research.att.com> | 2019-04-04 17:10:31 -0700 |
|---|---|---|
| committer | Marco Platania <platania@research.att.com> | 2019-04-04 17:10:31 -0700 |
| commit | 469b46f7230d9a2512c7c2103f51c7e85f69eb5a (patch) | |
| tree | cf871930459367057d12503554b581ab84a96911 | |
| parent | c5121c5bc5c544eb7be9432913f9099574270cbe (diff) | |
Create OpenStack encrytped pwd for robot
- The new encryption mechanism provided by SO is not compatible with robot decryption algorithm. We create a new environment variable that contains the OpenStack encrypted password in a format that robot can decrypt.
Change-Id: Ibce3f17742facb20aff51a2d7e023dcd8351109e
Issue-ID: INT-1016
Signed-off-by: Marco Platania <platania@research.att.com>
| -rw-r--r-- | deployment/heat/onap-oom/env/windriver/onap-oom.env | 2 | ||||
| -rwxr-xr-x | deployment/heat/onap-oom/scripts/deploy.sh | 6 |
2 files changed, 4 insertions, 4 deletions
diff --git a/deployment/heat/onap-oom/env/windriver/onap-oom.env b/deployment/heat/onap-oom/env/windriver/onap-oom.env index 4d4b66093..96c06c172 100644 --- a/deployment/heat/onap-oom/env/windriver/onap-oom.env +++ b/deployment/heat/onap-oom/env/windriver/onap-oom.env @@ -45,7 +45,7 @@ parameters: scriptVersion: "1.3.0" rancherIpAddress: "__rancher_ip_addr__" config: - openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED}" + openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED_FOR_ROBOT}" so: enabled: true so-catalog-db-adapter: diff --git a/deployment/heat/onap-oom/scripts/deploy.sh b/deployment/heat/onap-oom/scripts/deploy.sh index 264152f76..1616ad2ca 100755 --- a/deployment/heat/onap-oom/scripts/deploy.sh +++ b/deployment/heat/onap-oom/scripts/deploy.sh @@ -111,13 +111,13 @@ SSH_KEY=~/.ssh/onap_key source $WORKSPACE/test/ete/scripts/install_openstack_cli.sh -#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f -#export OS_PASSWORD_ENCRYPTED=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) +SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +export OS_PASSWORD_ENCRYPTED_FOR_ROBOT=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) #Use new encryption method pushd $WORKSPACE/deployment/heat/onap-oom/scripts javac Crypto.java -SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f export OS_PASSWORD_ENCRYPTED=$(java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY") popd |