7c66b96637
DRBD has its own authentication mechanism between drbd nodes.
To enable DRBD peer authentication, we need to specify the
following two parameters.
- cram-hmac : The HMAC algorithm to enable peer authentication
- shared-secret: The shared secret used in peer authentication
in drdb resource configuration to enable DRBD peer authentication.
This change adds the following 3 new parameters;
- hmac : Represents cram-hmac
- secret: Represents shared-secret
- secure: Enable peer authentication (if this is false,
cram-hmac is "sha1" and no shared-secret will be
present in drbd resource configuration files)
Test Plan:
PASS: Confirm hmac and secret has proper values in drbd resource
config when hmac and secret parameters are configured
PASS: Confirm drdb resource config has hmac default value and
no secret when hmac and secret parameters are not configured.
PASS: SX fresh install finishes successfully. Confirm drdb resource
config has proper hmac and secret values.
PASS: SX upgrade finishes successfully. Confirm drdb resource
config does not have new hmac value nor secret.
PASS: DX fresh install finishes successfully. Confirm drdb resource
config has proper hmac and secret values.
PASS: DX upgrade finishes successfully. Confirm drdb resource
config does not have new hmac value nor secret.
Story: 2011139
Task: 50253
Depends-On: https://review.opendev.org/c/starlingx/config/+/921018
Signed-off-by: Luiz Felipe Kina <LuizFelipe.EiskeKIna@windriver.com>
Change-Id: Ib8c94c9d285cfe7ea6b550cb934554601ab30cff
stx-puppet
The starlingx/stx-puppet repository handles the Puppet service1.
The Puppet service runs during bootstrap, and at every reboot, to provide a consistent configuration across the StarlingX system nodes.
This repository is not intended to be developed standalone, but rather as part of the StarlingX Source System, which is defined by the StarlingX manifest2.