Merge pull request #699 from globocom/fix-reinstallvm-mongodb-with-ssl

steps for create ssl when reinstall arbiter instance

Author: ricardosdias

dbaas/drivers/replication_topologies/base.py

@@ -348,12 +348,16 @@ def get_reinstallvm_steps(self):
                 'workflow.steps.util.plan.ConfigureLog',
                 'workflow.steps.util.metric_collector.ConfigureTelegraf',
                 ) + self.get_change_binaries_upgrade_patch_steps() + (
+                ) + self.get_reinstallvm_ssl_steps() + (
                 'workflow.steps.util.database.Start',
                 'workflow.steps.util.database.CheckIsUp',
                 'workflow.steps.util.metric_collector.RestartTelegraf',
             ),
         }] + self.get_reinstallvm_steps_final()
 
+    def get_reinstallvm_ssl_steps(self):
+        return ()
+
     def get_reinstallvm_steps_final(self):
         return [{
             'Enabling monitoring and alarms': (

dbaas/drivers/replication_topologies/mongodb.py

@@ -1168,6 +1168,18 @@ def get_database_migrate_steps_stage_3(self):
                 'workflow.steps.util.host_provider.DestroyServiceAccountMigrate',
             )}]
 
+    def get_reinstallvm_ssl_steps(self):
+        return (
+            'workflow.steps.util.ssl.UpdateOpenSSlLibIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.MongoDBUpdateCertificatesIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.CreateSSLFolderIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.MongoDBCreateSSLConfForInfraIPIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.RequestSSLForInfraIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.CreateJsonRequestFileInfraIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.CreateCertificateInfraMongoDBIfConfiguredArbiterOnly',
+            'workflow.steps.util.ssl.SetSSLFilesAccessMongoDBIfConfiguredArbiterOnly',
+        )
+
 
 class MongoDBReplicaset40(MongoDBReplicaset):
 

dbaas/workflow/steps/util/ssl.py

@@ -861,3 +861,43 @@ def do(self):
         if self.plan.is_ha:
             self.client.admin.command(
                 'setParameter', 1, clusterAuthMode='x509')
+
+
+class ReinstallVMSSLArbiterOnly(IfConguredSSLValidator):
+    @property
+    def is_valid(self):
+        if self.is_database_instance:
+            return False
+        return super(ReinstallVMSSLArbiterOnly, self).is_valid
+
+
+class UpdateOpenSSlLibIfConfiguredArbiterOnly(UpdateOpenSSlLibIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class MongoDBUpdateCertificatesIfConfiguredArbiterOnly(MongoDBUpdateCertificatesIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class CreateSSLFolderIfConfiguredArbiterOnly(CreateSSLFolderIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class MongoDBCreateSSLConfForInfraIPIfConfiguredArbiterOnly(MongoDBCreateSSLConfForInfraIPIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class RequestSSLForInfraIfConfiguredArbiterOnly(RequestSSLForInfraIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class CreateJsonRequestFileInfraIfConfiguredArbiterOnly(CreateJsonRequestFileInfraIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass
+
+
+class CreateCertificateInfraMongoDBIfConfiguredArbiterOnly(CreateCertificateInfraMongoDBIfConfigured,ReinstallVMSSLArbiterOnly ):
+    pass
+
+
+class SetSSLFilesAccessMongoDBIfConfiguredArbiterOnly(SetSSLFilesAccessMongoDBIfConfigured, ReinstallVMSSLArbiterOnly):
+    pass