瀏覽代碼

Bug 1615275. Regenerate session_secret if it can't be used with oauth-proxy

session_secret generated by 3.10 is 200 bytes. oauth-proxy can use 16, 24 or 32
bytes session_secret.
Anton Sherkhonov 6 年之前
父節點
當前提交
a696933a30
共有 1 個文件被更改,包括 1 次插入2 次删除
  1. 1 2
      roles/openshift_logging_kibana/tasks/main.yaml

+ 1 - 2
roles/openshift_logging_kibana/tasks/main.yaml

@@ -71,8 +71,7 @@
   copy:
     content: "{{ 32 | lib_utils_oo_random_word }}"
     dest: "{{ generated_certs_dir }}/session_secret"
-  when:
-    - not session_secret_file.stat.exists
+  when: not session_secret_file.stat.exists or session_secret_file.stat.size > 50
 
 # gen oauth_secret if necessary
 - name: Generate oauth secret