From: Marco Platania Date: Fri, 5 Apr 2019 00:10:31 +0000 (-0700) Subject: Create OpenStack encrytped pwd for robot X-Git-Tag: 4.0.0-ONAP~194 X-Git-Url: https://gerrit.onap.org/r/gitweb?a=commitdiff_plain;h=refs%2Fchanges%2F83%2F84283%2F1;p=integration.git Create OpenStack encrytped pwd for robot - The new encryption mechanism provided by SO is not compatible with robot decryption algorithm. We create a new environment variable that contains the OpenStack encrypted password in a format that robot can decrypt. Change-Id: Ibce3f17742facb20aff51a2d7e023dcd8351109e Issue-ID: INT-1016 Signed-off-by: Marco Platania --- diff --git a/deployment/heat/onap-oom/env/windriver/onap-oom.env b/deployment/heat/onap-oom/env/windriver/onap-oom.env index 4d4b66093..96c06c172 100644 --- a/deployment/heat/onap-oom/env/windriver/onap-oom.env +++ b/deployment/heat/onap-oom/env/windriver/onap-oom.env @@ -45,7 +45,7 @@ parameters: scriptVersion: "1.3.0" rancherIpAddress: "__rancher_ip_addr__" config: - openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED}" + openStackEncryptedPasswordHere: "${OS_PASSWORD_ENCRYPTED_FOR_ROBOT}" so: enabled: true so-catalog-db-adapter: diff --git a/deployment/heat/onap-oom/scripts/deploy.sh b/deployment/heat/onap-oom/scripts/deploy.sh index 264152f76..1616ad2ca 100755 --- a/deployment/heat/onap-oom/scripts/deploy.sh +++ b/deployment/heat/onap-oom/scripts/deploy.sh @@ -111,13 +111,13 @@ SSH_KEY=~/.ssh/onap_key source $WORKSPACE/test/ete/scripts/install_openstack_cli.sh -#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f -#export OS_PASSWORD_ENCRYPTED=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) +SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +export OS_PASSWORD_ENCRYPTED_FOR_ROBOT=$(echo -n "$OS_PASSWORD" | openssl aes-128-ecb -e -K "$SO_ENCRYPTION_KEY" -nosalt | xxd -c 256 -p) #Use new encryption method pushd $WORKSPACE/deployment/heat/onap-oom/scripts javac Crypto.java -SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f +#SO_ENCRYPTION_KEY=aa3871669d893c7fb8abbcda31b88b4f export OS_PASSWORD_ENCRYPTED=$(java Crypto "$OS_PASSWORD" "$SO_ENCRYPTION_KEY") popd