Awx: Change secret_key and re-encrypt credentials

[LucaBernstein]

ISSUE TYPE

• Feature Idea

SUMMARY

Currently it seems not possible to change the awx secret_key (from installer/inventory) to be able to change the credential encryption key - or is it possible?

Will this be supported in the future?

[ryanpetrello]

Hey @LucaBernstein,

It's possible to _change_ the key, but AWX doesn't currently have any tooling to decrypt and re-encrypt your secrets for you. It's possible we might add functionality to support something like this in the future.

[ryanpetrello]

Hey @LucaBernstein I've opened a PR to add a new command for generating a new SECRET_KEY (if you're interested in trying it out):

https://github.com/ansible/awx/pull/5493

The intended usage here is to:

1. Stop all running services.
2. _Run_ the new command awx-manage regenerate_secret_key from one database-connected node. The new key is printed, and can be replaced in your inventory.
3. Start all services again.

[kdelee]

@elyezer is out on PTO for a while, but 90% sure this is ready to close

[kdelee]

Going to close as I reviewed his work and indeed while we can do some more work on running his automation on a regular basis and reporting it somewhere, we can test on demand and its working.