Adding baremetalset root password changes

This change is to add baremetalset root password secret for compute nodes to debug via virtual console.
openstack-k8s-operators · Mar 27, 2024 · 3441ac0 · 3441ac0
1 parent f8310c4
commit 3441ac0
Show file tree

Hide file tree

Showing 9 changed files with 78 additions and 0 deletions.
diff --git a/examples/va/nfv/ovs-dpdk-sriov/edpm/values.yaml b/examples/va/nfv/ovs-dpdk-sriov/edpm/values.yaml
@@ -6,13 +6,17 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  root_password: cmVkaGF0Cg==
   preProvisioned: false
   baremetalSetTemplate:
     ctlplaneInterface: eno2 #CHANGEME
     cloudUserName: cloud-admin
     provisioningInterface: enp1s0 #CHANGEME
     bmhLabelSelector:
       app: openstack #CHANGEME
+    passwordSecret:
+      name: baremetalset-password-secret
+      namespace: openstack
   ssh_keys:
     # Authorized keys that will have access to the dataplane computes via SSH
     authorized: CHANGEME

diff --git a/examples/va/nfv/ovs-dpdk/edpm/values.yaml b/examples/va/nfv/ovs-dpdk/edpm/values.yaml
@@ -6,13 +6,17 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  root_password: cmVkaGF0Cg==
   preProvisioned: false
   baremetalSetTemplate:
     ctlplaneInterface: eno2 #CHANGEME
     cloudUserName: cloud-admin
     provisioningInterface: enp1s0 #CHANGEME
     bmhLabelSelector:
       app: openstack #CHANGEME
+    passwordSecret:
+      name: baremetalset-password-secret
+      namespace: openstack
   ssh_keys:
     # Authorized keys that will have access to the dataplane computes via SSH
     authorized: CHANGEME

diff --git a/examples/va/nfv/sriov/edpm/values.yaml b/examples/va/nfv/sriov/edpm/values.yaml
@@ -6,13 +6,17 @@ metadata:
   annotations:
     config.kubernetes.io/local-config: "true"
 data:
+  root_password: cmVkaGF0Cg==
   preProvisioned: false
   baremetalSetTemplate:
     ctlplaneInterface: eno2 #CHANGEME
     cloudUserName: cloud-admin
     provisioningInterface: enp1s0 #CHANGEME
     bmhLabelSelector:
       app: openstack #CHANGEME
+    passwordSecret:
+      name: baremetalset-password-secret
+      namespace: openstack
   ssh_keys:
     # Authorized keys that will have access to the dataplane computes via SSH
     authorized: CHANGEME

diff --git a/va/nfv/ovs-dpdk-sriov/edpm/baremetalset-password-secret.yaml b/va/nfv/ovs-dpdk-sriov/edpm/baremetalset-password-secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  NodeRootPassword: _replaced_
+kind: Secret
+metadata:
+  name: baremetalset-password-secret
+  namespace: openstack
+type: Opaque
diff --git a/va/nfv/ovs-dpdk-sriov/edpm/kustomization.yaml b/va/nfv/ovs-dpdk-sriov/edpm/kustomization.yaml
@@ -20,9 +20,23 @@ components:
 - ../../../../lib/dataplane
 
 resources:
+- baremetalset-password-secret.yaml
 - nova_ovs_dpdk_sriov.yaml
 
 replacements:
+- source:
+    kind: ConfigMap
+    name: edpm-values
+    fieldPath: data.root_password
+  targets:
+  - select:
+      kind: Secret
+      name: baremetalset-password-secret
+    fieldPaths:
+    - data.NodeRootPassword
+    options:
+      create: true
+
 # Nova compute CPU pinning customization
 - source:
     kind: ConfigMap

diff --git a/va/nfv/ovs-dpdk/edpm/baremetalset-password-secret.yaml b/va/nfv/ovs-dpdk/edpm/baremetalset-password-secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  NodeRootPassword: _replaced_
+kind: Secret
+metadata:
+  name: baremetalset-password-secret
+  namespace: openstack
+type: Opaque
diff --git a/va/nfv/ovs-dpdk/edpm/kustomization.yaml b/va/nfv/ovs-dpdk/edpm/kustomization.yaml
@@ -20,9 +20,23 @@ components:
 - ../../../../lib/dataplane
 
 resources:
+- baremetalset-password-secret.yaml
 - nova_ovs_dpdk.yaml
 
 replacements:
+- source:
+    kind: ConfigMap
+    name: edpm-values
+    fieldPath: data.root_password
+  targets:
+  - select:
+      kind: Secret
+      name: baremetalset-password-secret
+    fieldPaths:
+    - data.NodeRootPassword
+    options:
+      create: true
+
 # Nova compute CPU pinning customization
 - source:
     kind: ConfigMap

diff --git a/va/nfv/sriov/edpm/baremetalset-password-secret.yaml b/va/nfv/sriov/edpm/baremetalset-password-secret.yaml
@@ -0,0 +1,8 @@
+apiVersion: v1
+data:
+  NodeRootPassword: _replaced_
+kind: Secret
+metadata:
+  name: baremetalset-password-secret
+  namespace: openstack
+type: Opaque
diff --git a/va/nfv/sriov/edpm/kustomization.yaml b/va/nfv/sriov/edpm/kustomization.yaml
@@ -20,9 +20,23 @@ components:
 - ../../../../lib/dataplane
 
 resources:
+- baremetalset-password-secret.yaml
 - nova_sriov.yaml
 
 replacements:
+- source:
+    kind: ConfigMap
+    name: edpm-values
+    fieldPath: data.root_password
+  targets:
+  - select:
+      kind: Secret
+      name: baremetalset-password-secret
+    fieldPaths:
+    - data.NodeRootPassword
+    options:
+      create: true
+
 # Nova compute CPU pinning customization
 - source:
     kind: ConfigMap