aboutsummaryrefslogtreecommitdiff
path: root/releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml
diff options
context:
space:
mode:
authorFranciszek Przewozny <przewozny.franciszek@gmail.com>2026-09-01 22:16:14 +0200
committerFranciszek Przewoźny <przewozny.franciszek@gmail.com>2026-09-16 19:08:14 +0000
commit8d5cc5ef66b140fb1f2c1b03d57c9c85f457b1af (patch)
tree2dfbbc7160d9b550ed9ab7e8066906d507596cc2 /releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml
parentfab0967e3f737ebf78f3c1de897bdf1b837c0b83 (diff)
downloadkolla-ansible-8d5cc5ef66b140fb1f2c1b03d57c9c85f457b1af.tar.gz
kolla-ansible-8d5cc5ef66b140fb1f2c1b03d57c9c85f457b1af.zip
prometheus: accept vault-encrypted values in precheck
Ansible's "is string" Jinja test returns False for values encrypted with ansible-vault (AnsibleVaultEncryptedUnicode), so a precheck using such an encrypted password/salt failed incorrectly. Accept the value if it is either a plain string or vault_encrypted. Closes-Bug: #2115495 Change-Id: I0bf783c40ca5be66717193be9dece971805fca55 Signed-off-by: fprzewozn <przewozny.franciszek@gmail.com> (cherry picked from commit ed74de7e9a76fac01554fc876c4a581b857903ea)
Diffstat (limited to 'releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml')
-rw-r--r--releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml10
1 files changed, 10 insertions, 0 deletions
diff --git a/releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml b/releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml
new file mode 100644
index 000000000..8a6bc53a9
--- /dev/null
+++ b/releasenotes/notes/fix_prometheus_vault_prechecks-5335880cd18680dd.yaml
@@ -0,0 +1,10 @@
+---
+fixes:
+ - |
+ Fixes Prometheus precheck failing on ``prometheus_bcrypt_salt``,
+ ``prometheus_password``, ``prometheus_grafana_password`` and
+ ``prometheus_skyline_password`` when these are Ansible Vault encrypted
+ values, due to a known Ansible limitation where the ``is string`` Jinja
+ test does not recognise vault-encrypted strings. See
+ `ansible/ansible#33067 <https://github.com/ansible/ansible/issues/33067>`__
+ for details.