From 6dacbdc3f7009b17897bea60a012579b492d1cea Mon Sep 17 00:00:00 2001
From: Mark <mark@openappstack.net>
Date: Tue, 2 Jun 2020 14:03:44 +0200
Subject: [PATCH] use hashing filter from passlib

---
 ansible/roles/apps/tasks/prometheus.yml | 6 +-----
 requirements-stable.txt                 | 1 +
 requirements.txt                        | 1 +
 3 files changed, 3 insertions(+), 5 deletions(-)

diff --git a/ansible/roles/apps/tasks/prometheus.yml b/ansible/roles/apps/tasks/prometheus.yml
index a43a3cbeb..599f9b2fa 100644
--- a/ansible/roles/apps/tasks/prometheus.yml
+++ b/ansible/roles/apps/tasks/prometheus.yml
@@ -1,8 +1,4 @@
 ---
-- name: Generate htpasswd hash
-  shell: openssl passwd -apr1 "{{ prometheus_basic_auth }}"
-  register: prometheus_passwd
-
 - name: Create auth secret for basic auth
   tags:
     - prometheus
@@ -17,7 +13,7 @@
         namespace: "oas"
         name: "prometheus-basic-auth"
       data:
-        auth: "{{ ('admin:' + prometheus_passwd.stdout )  | b64encode }}"
+        auth: "{{ ('admin:' + (prometheus_basic_auth | password_hash('apr_md5_crypt')) + '\n')  | b64encode }}"
 - name: Create Kubernetes secret with prometheus settings
   tags:
     - config
diff --git a/requirements-stable.txt b/requirements-stable.txt
index 3d2d87d53..878856abf 100644
--- a/requirements-stable.txt
+++ b/requirements-stable.txt
@@ -52,3 +52,4 @@ urllib3==1.25.8
 wcwidth==0.1.8
 websocket-client==0.57.0
 zipp==3.1.0
+passlib==1.7.2
diff --git a/requirements.txt b/requirements.txt
index c3985b01a..281dc9a70 100644
--- a/requirements.txt
+++ b/requirements.txt
@@ -18,3 +18,4 @@ wheel>=0.33.1
 pytz>=2019.1
 -e git+https://open.greenhost.net/greenhost/cloud-api#egg=greenhost_cloud
 -e git+https://open.greenhost.net/openappstack/oas_behave#egg=oas_behave
+passlib>=1.7.2
-- 
GitLab