Skip to content

Rotate ansible-vault password to a stronger key - #31

Merged
openshift-merge-bot[bot] merged 1 commit into
mainfrom
rotate-vault-password
Aug 5, 2026
Merged

Rotate ansible-vault password to a stronger key#31
openshift-merge-bot[bot] merged 1 commit into
mainfrom
rotate-vault-password

Conversation

@imatza-rh

@imatza-rh imatza-rh commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

Replace the vault password with a stronger randomly generated key.

Changes:

  • configs/secret.yaml rekeyed with new password

Companion changes:

  • shiftstack-tools: updated vault-pass, bumped Dockerfile from Fedora 40 (EOL) to 42, fixed vault.md
  • Container image quay.io/shiftstack-qe/shiftstack-client:latest rebuilt and pushed

Jira: OSPRH-32937

Replace the weak vault password with a randomly generated 64-character
base64-encoded key. The vault-pass file in shiftstack-tools and the
shiftstack-client container image have been updated accordingly.

OSPRH-32937

Change-Id: I4d86640a7e92c46492dd47513f481870d7a11902
Signed-off-by: Itay Matza <imatza@redhat.com>
@dlaw4608

dlaw4608 commented Aug 5, 2026

Copy link
Copy Markdown
Contributor

/lgtm
/approve

@openshift-ci

openshift-ci Bot commented Aug 5, 2026

Copy link
Copy Markdown

[APPROVALNOTIFIER] This PR is APPROVED

This pull-request has been approved by: dlaw4608

The full list of commands accepted by this bot can be found here.

The pull request process is described here

Details Needs approval from an approver in each of these files:

Approvers can indicate their approval by writing /approve in a comment
Approvers can cancel approval by writing /approve cancel in a comment

@openshift-merge-bot
openshift-merge-bot Bot merged commit 54d97d5 into main Aug 5, 2026
2 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

2 participants