[scenarios] Pin DB root password for whitebox tempest compat - #4092
[scenarios] Pin DB root password for whitebox tempest compat#4092sbauza wants to merge 1 commit into
Conversation
8e486d7 to
bd1763c
Compare
|
[APPROVALNOTIFIER] This PR is NOT APPROVED This pull-request has been approved by: The full list of commands accepted by this bot can be found here. DetailsNeeds approval from an approver in each of these files:Approvers can indicate their approval by writing |
sbauza
changed the title
gibizer
left a comment
gibizer
left a comment
There was a problem hiding this comment.
That sounds like a reasonable short term solution to unblock the work.
install_yamls PR openstack-k8s-operators/install_yamls#1158 replaced hardcoded passwords with dynamically generated per-service secrets. The whitebox_tempest_plugin tempestconf overrides still reference the old hardcoded whitebox-database.password value ("12345678"), causing Access Denied errors against Galera. As a short-term fix, pin DB_ROOT_PASSWORD in the HCI ceph scenario so that the deployed Galera root password matches what whitebox tempest expects. A proper long-term fix (reading DbRootPassword from osp-secret at runtime) is tracked in openstack-k8s-operators#4090. Signed-off-by: Sylvain Bauza <sbauza@redhat.com> Assisted-by: Cursor <cursoragent@cursor.com> Co-authored-by: Cursor <cursoragent@cursor.com>
bd1763c to
a32e1ac
Compare
sbauza
changed the title
|
Build failed (check pipeline). Post ✔️ openstack-k8s-operators-content-provider SUCCESS in 2h 59m 13s |
|
Closing in favor of the downstream ci-framework-jobs fix: https://gitlab.cee.redhat.com/ci-framework/ci-framework-jobs/-/merge_requests/3516 That MR pins DB_ROOT_PASSWORD in the edpm_base job definition where the whitebox tempest overrides live, which is a more targeted fix than changing the upstream scenario files. |
2 participants
install_yamls PR openstack-k8s-operators/install_yamls#1158 replaced
hardcoded passwords with dynamically generated per-service secrets.
The
whitebox_tempest_plugintempestconf overrides still reference theold hardcoded
whitebox-database.passwordvalue (12345678), causingAccess Deniederrors against Galera.As a short-term fix, pin
DB_ROOT_PASSWORDin themultinode-ciandhci_ceph_backendsscenarios so that the deployed Galera root passwordmatches what whitebox tempest expects. A proper long-term fix (reading
DbRootPasswordfromosp-secretat runtime) is tracked in #4090.