monitor2: add monitor password promise

stack/monitor2/buildout.cfg

@@ -106,12 +106,13 @@ recipe = slapos.recipe.template:jinja2
 filename = template-monitor.cfg
 template = ${:_profile_base_location_}/instance-monitor.cfg.jinja2.in
 rendered = ${buildout:directory}/template-monitor.cfg
-md5sum = fde8b1c9ff04c64a3b7bb0ae11ffe0c5
+md5sum = 07504e9bccb50ff17945363f7440472e
 context =
     key apache_location apache:location
     key gzip_location gzip:location
     raw monitor_bin ${monitor-bin:location}/${monitor-bin:filename}
     raw monitor_conf_template ${monitor-conf:location}/${monitor-conf:filename}
+    raw monitor_password_promise_template ${monitor-password-promise:location}/${monitor-password-promise:filename}
     raw monitor_web_default_promise_interface ${monitor-web-default-promise-interface:location}/${monitor-web-default-promise-interface:filename}
     raw monitor_web_index_html ${monitor-web-index-html:location}/${monitor-web-index-html:filename}
     raw monitor_web_monitor_css ${monitor-web-monitor-css:location}/${monitor-web-monitor-css:filename}
@@ -201,6 +202,11 @@ destination = ${buildout:parts-directory}/monitor-template-settings-cgi
 filename = settings.cgi.in
 mode = 0644
 
+[monitor-password-promise]
+<= monitor-download-base
+filename = monitor-password-promise.py.in
+md5sum = 0a9a42551ed6bdb973fd1f0dd1d4ec86
+
 [monitor-password-cgi]
 recipe = hexagonit.recipe.download
 url = ${:_profile_base_location_}/webfile-directory/${:filename}

stack/monitor2/instance-monitor.cfg.jinja2.in

@@ -271,6 +271,16 @@ frequency = * * * * *
 public-path-list = ${monitor-httpd-conf-parameter:access-log} ${monitor-httpd-conf-parameter:error-log}
 #private-path-list =
 
+[monitor-password-promise]
+recipe = slapos.recipe.template:jinja2
+template = {{ monitor_password_promise_template }}
+rendered = ${directory:monitor-promise}/${:filename}
+filename = monitor-password
+mode = 0755
+context =
+  raw python_executable {{ python_executable }}
+  raw password_changed_once_path ${directory:var}/monitor-password-changed-once
+
 [publish]
 recipe = slapos.cookbook:publish
 monitor-url = ${monitor-httpd-conf-parameter:url}
@@ -294,4 +304,5 @@ parts =
   ca-httpd
   monitor-httpd-promise
   monitor-httpd-promise-conf
+  monitor-password-promise
   publish

stack/monitor2/monitor-password-promise.py.in

+#!{{ python_executable }}
+password_changed_once_path = "{{ password_changed_once_path }}"
+
+import os
+
+def main():
+  if os.path.exists(password_changed_once_path):
+    print('{"status":"OK"}')
+    return 0
+  print('{"status":"BAD","message":"Password never changed"}')
+  return 1
+
+if __name__ == "__main__":
+  exit(main())