From d69b57c01404928f10418da5034ec64f05281952 Mon Sep 17 00:00:00 2001 From: Dimitri Savineau Date: Tue, 2 May 2023 10:19:21 -0400 Subject: [PATCH] web: Use sha1 filter instead of md5 (#1386) This was fixed in 6cae8df but the task/web split rebase didn't apply this to the web deployment. This prevents to deploy the operator when FIPS is enabled. {"msg": "An unhandled exception occurred while running the lookup plugin 'template'. Error was a , original message: [digital envelope routines: EVP_DigestInit_ex] disabled for FIPS"} Signed-off-by: Dimitri Savineau --- roles/installer/templates/deployments/web.yaml.j2 | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/roles/installer/templates/deployments/web.yaml.j2 b/roles/installer/templates/deployments/web.yaml.j2 index d53a0482..9e7ceb06 100644 --- a/roles/installer/templates/deployments/web.yaml.j2 +++ b/roles/installer/templates/deployments/web.yaml.j2 @@ -32,7 +32,7 @@ spec: "secrets/app_credentials", "storage/persistent", ] %} - checksum-{{ template | replace('/', '-') }}: "{{ lookup('template', template + '.yaml.j2') | md5 }}" + checksum-{{ template | replace('/', '-') }}: "{{ lookup('template', template + '.yaml.j2') | sha1 }}" {% endfor %} {% for secret in [ "bundle_cacert", @@ -42,7 +42,7 @@ spec: "receptor_ca", "receptor_work_signing", ] %} - checksum-secret-{{ secret }}: "{{ lookup('ansible.builtin.vars', secret, default='')["resources"][0]["data"] | default('') | md5 }}" + checksum-secret-{{ secret }}: "{{ lookup('ansible.builtin.vars', secret, default='')["resources"][0]["data"] | default('') | sha1 }}" {% endfor %} {% if web_annotations %} {{ web_annotations | indent(width=8) }}