Remove plain OpenStack pwd from Heat

Replace plain OpenStack password with its encrypted version

Change-Id: I3afd8c02ce7d004a2817bad69a667edb28982f67
Issue-ID: INT-646
Signed-off-by: Gary Wu <gary.i.wu@huawei.com>

diff --git a/test/ete/labs/gwu/onap-openstack-template.env b/test/ete/labs/gwu/onap-openstack-template.env
index 3071356..53139b5 100644 (file)
--- a/test/ete/labs/gwu/onap-openstack-template.env
+++ b/test/ete/labs/gwu/onap-openstack-template.env
@@ -46,9 +46,7 @@ parameters:
 
   openstack_username: ${OS_USERNAME}
 
-  openstack_api_key: ${OS_PASSWORD}
-
-  openstack_auth_method: password
+  openstack_api_key: ${OS_PASSWORD_ENCRYPTED}
 
   openstack_region: RegionOne
 

diff --git a/test/ete/labs/huawei/onap-openstack-template.env b/test/ete/labs/huawei/onap-openstack-template.env
index c682dc5..e6e2a2c 100644 (file)
--- a/test/ete/labs/huawei/onap-openstack-template.env
+++ b/test/ete/labs/huawei/onap-openstack-template.env
@@ -46,9 +46,7 @@ parameters:
 
   openstack_username: ${OS_USERNAME}
 
-  openstack_api_key: ${OS_PASSWORD}
-
-  openstack_auth_method: password
+  openstack_api_key: ${OS_PASSWORD_ENCRYPTED}
 
   openstack_region: RegionOne
 

diff --git a/test/ete/labs/tlab/onap-openstack-template.env b/test/ete/labs/tlab/onap-openstack-template.env
index feded7f..dcdb7d5 100644 (file)
--- a/test/ete/labs/tlab/onap-openstack-template.env
+++ b/test/ete/labs/tlab/onap-openstack-template.env
@@ -46,9 +46,7 @@ parameters:
 
   openstack_username: ${OS_USERNAME}
 
-  openstack_api_key: ${OS_PASSWORD}
-
-  openstack_auth_method: password
+  openstack_api_key: ${OS_PASSWORD_ENCRYPTED}
 
   openstack_region: RegionOne
 

diff --git a/test/ete/labs/windriver/onap-openstack-template.env b/test/ete/labs/windriver/onap-openstack-template.env
index b18bd62..90d901d 100644 (file)
--- a/test/ete/labs/windriver/onap-openstack-template.env
+++ b/test/ete/labs/windriver/onap-openstack-template.env
@@ -46,9 +46,7 @@ parameters:
 
   openstack_username: ${OS_USERNAME}
 
-  openstack_api_key: ${OS_PASSWORD}
-
-  openstack_auth_method: password
+  openstack_api_key: ${OS_PASSWORD_ENCRYPTED}
 
   openstack_region: RegionOne
 

diff --git a/test/ete/scripts/deploy-onap.sh b/test/ete/scripts/deploy-onap.sh
index 2fd0556..6c8d05d 100755 (executable)
--- a/test/ete/scripts/deploy-onap.sh
+++ b/test/ete/scripts/deploy-onap.sh
@@ -19,6 +19,8 @@ fi
 
 source $WORKSPACE/test/ete/scripts/install_openstack_cli.sh
 
+SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f
+export OS_PASSWORD_ENCRYPTED=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p)
 
 DEMO_DIR=${ONAP_WORKDIR}/demo
 if [ "$#" -ge 2 ]; then