From 469b46f7230d9a2512c7c2103f51c7e85f69eb5a Mon Sep 17 00:00:00 2001 From: Marco Platania Date: Thu, 4 Apr 2019 17:10:31 -0700 Subject: Create OpenStack encrytped pwd for robot - The new encryption mechanism provided by SO is not compatible with robot decryption algorithm. We create a new environment variable that contains the OpenStack encrypted password in a format that robot can decrypt. Change-Id: Ibce3f17742facb20aff51a2d7e023dcd8351109e Issue-ID: INT-1016 Signed-off-by: Marco Platania --- deployment/heat/onap-oom/env/windriver/onap-oom.env | 2 +- deployment/heat/onap-oom/scripts/deploy.sh | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) (limited to 'deployment') diff --git a/deployment/heat/onap-oom/env/windriver/onap-oom.env b/deployment/heat/onap-oom/env/windriver/onap-oom.env index 4d4b66093..96c06c172 100644 --- a/deployment/heat/onap-oom/env/windriver/onap-oom.env +++ b/deployment/heat/onap-oom/env/windriver/onap-oom.env @@ -45,7 +45,7 @@ parameters: scriptVersion: "1.3.0" rancherIpAddress: "__rancher_ip_addr__" config: - openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED}" + openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED_FOR_ROBOT}" so: enabled: true so-catalog-db-adapter: diff --git a/deployment/heat/onap-oom/scripts/deploy.sh b/deployment/heat/onap-oom/scripts/deploy.sh index 264152f76..1616ad2ca 100755 --- a/deployment/heat/onap-oom/scripts/deploy.sh +++ b/deployment/heat/onap-oom/scripts/deploy.sh @@ -111,13 +111,13 @@ SSH_KEY=~/.ssh/onap_key source $WORKSPACE/test/ete/scripts/install_openstack_cli.sh -#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f -#export OS_PASSWORD_ENCRYPTED=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) +SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +export OS_PASSWORD_ENCRYPTED_FOR_ROBOT=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) #Use new encryption method pushd $WORKSPACE/deployment/heat/onap-oom/scripts javac Crypto.java -SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f export OS_PASSWORD_ENCRYPTED=$(java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY") popd -- cgit 1.2.3-korg