AMW-377 After creating a broker, it is not possible to update the keystore password in bootstrap.xml

.github/workflows/ci.yml

@@ -26,4 +26,4 @@ jobs:
       podman_tests_current: >-
         [ "default", "amq_upgrade", "custom_xml", "federation", "mask_passwords", "uninstall" ]
       podman_tests_next: >-
-        [ "default", "amq_upgrade", "custom_xml", "federation", "mask_passwords", "uninstall" ]
+        [ "default", "amq_upgrade", "custom_xml", "federation", "mask_passwords", "uninstall" ]

molecule/static_cluster/verify.yml

@@ -1,6 +1,9 @@
 ---
 - name: Verify
   hosts: all
+  vars:
+    activemq_instance_home: /opt/amq/amq-broker
+    activemq_tls_keystore_password: securepass
   tasks:
     - name: Populate service facts
       ansible.builtin.service_facts:
@@ -67,3 +70,14 @@
           - ansible_facts.activemq.Backup == true
           - ansible_facts.activemq.SharedStore == true
       when: inventory_hostname == 'instance2'
+
+    - name: "Check if bootstrap.xml contains the updated keystore password"
+      ansible.builtin.command: sed -n 's/.*keyStorePassword="\([^"]*\)".*/\1/p' "{{ activemq_instance_home }}/etc/bootstrap.xml"
+      register: bootstrap_keystore_password
+      changed_when: false
+      failed_when: bootstrap_keystore_password.rc != 0
+
+    - name: "Fail if bootstrap.xml does not have the updated keystore password"
+      ansible.builtin.fail:
+        msg: "Keystore password in bootstrap.xml is not updated! Expected: {{ activemq_tls_keystore_password }}, Found: {{ bootstrap_keystore_password.stdout }}"
+      when: bootstrap_keystore_password.stdout != "securepass"

roles/activemq/tasks/configure_files.yml

@@ -44,6 +44,19 @@
   notify:
     - restart amq_broker
 
+- name: "Update keystore password in all bindings inside bootstrap.xml"
+  become: "{{ activemq_install_requires_become | default(true) }}"
+  middleware_automation.common.xml:
+    path: "{{ activemq.instance_home }}/etc/bootstrap.xml"
+    xpath: '//b:binding'
+    attribute: keyStorePassword
+    value: "{{ activemq_tls_keystore_password }}"
+    namespaces:
+      b: http://activemq.apache.org/schema
+  notify:
+    - restart amq_broker
+  when: activemq_tls_enabled
+
 - name: "Configure using properties file"
   become: "{{ activemq_install_requires_become | default(true) }}"
   ansible.builtin.template: