Skip to content

Commit 1436235

Browse files
committed
Recreate credentials if they are missing on install
To avoid reusing old passwords, we need to force recreating user secrets if they are already present. Uninstall also did not remove those secrets, fixed. This commit also adjust heatlhcheck timeout to 5 minutes as the server container can now take a while until it is ready.
1 parent 89a90b2 commit 1436235

3 files changed

Lines changed: 7 additions & 4 deletions

File tree

mgradm/cmd/uninstall/podman.go

Lines changed: 2 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -90,6 +90,8 @@ func uninstallForPodman(
9090
podman.DeleteSecret(podman.CASecret, !flags.Force)
9191
podman.DeleteSecret(podman.SSLCertSecret, !flags.Force)
9292
podman.DeleteSecret(podman.SSLKeySecret, !flags.Force)
93+
podman.DeleteSecret(podman.AdminUserSecret, !flags.Force)
94+
podman.DeleteSecret(podman.AdminPassSecret, !flags.Force)
9395

9496
err := systemd.ReloadDaemon(!flags.Force)
9597

mgradm/shared/podman/podman.go

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -155,14 +155,14 @@ func GenerateSystemdService(
155155
}
156156

157157
// Add the SCC and admin credentials as secrets
158-
if err := podman.CreateCredentialsSecretsIfMissing(
158+
if err := podman.CreateCredentialsSecrets(
159159
podman.AdminUserSecret, flags.Admin.Login, podman.AdminPassSecret, flags.Admin.Password,
160160
); err != nil {
161161
return err
162162
}
163163

164164
if flags.SCC.User != "" {
165-
if err := podman.CreateCredentialsSecretsIfMissing(
165+
if err := podman.CreateCredentialsSecrets(
166166
podman.SCCUserSecret, flags.SCC.User, podman.SCCPassSecret, flags.SCC.Password,
167167
); err != nil {
168168
return err

shared/connection.go

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -363,8 +363,9 @@ func (c *Connection) WaitForContainer() error {
363363

364364
// WaitForHealthcheck waits at most 120s for healtcheck to succeed.
365365
func (c *Connection) WaitForHealthcheck() error {
366+
const maxWaitTime = 300
366367
// Wait for the system to be up
367-
for i := 0; i < 120; i++ {
368+
for i := 0; i < maxWaitTime; i++ {
368369
_, err := c.Healthcheck()
369370
if err != nil {
370371
log.Debug().Err(err)
@@ -373,7 +374,7 @@ func (c *Connection) WaitForHealthcheck() error {
373374
}
374375
return nil
375376
}
376-
return errors.New(L("container didn't start within 120s. Check for the service status"))
377+
return fmt.Errorf(L("container didn't start within %ds. Check for the service status"), maxWaitTime)
377378
}
378379

379380
// Copy transfers a file to or from the container.

0 commit comments

Comments
 (0)