be3be07bfc
This patch adds two actions:
1. An action to list the service usernames that can be rotated.
2. An action to rotate a service username that is on the list of
usernames that can be rotated.
Change-Id: I3a8a6af7ec8b0ea32da04eff34fafd32f43cee0e
func-test-pr: https://github.com/openstack-charmers/zaza-openstack-tests/pull/1054
(cherry picked from commit 2271a961b7)
45 lines
1.8 KiB
YAML
45 lines
1.8 KiB
YAML
pause:
|
|
description: |
|
|
Pause keystone services.
|
|
If the keystone deployment is clustered using the hacluster charm, the
|
|
corresponding hacluster unit on the node must first be paused as well.
|
|
Not doing so may lead to an interruption of service.
|
|
resume:
|
|
description: |
|
|
Resume keystone services.
|
|
If the keystone deployment is clustered using the hacluster charm, the
|
|
corresponding hacluster unit on the node must be resumed as well.
|
|
rotate-admin-password:
|
|
description: |
|
|
Rotate the admin user's password.
|
|
The current password is replaced with a randomly generated password. The
|
|
new password is stored in the leader's admin_passwd bucket.
|
|
rotate-service-user-password:
|
|
description: |
|
|
Rotate the specified service user's password. The current password is
|
|
replaced with a randomly generated password. The password is changed on the
|
|
relation to the service user's units. This may result in a control plane
|
|
outage for the duration of the password changing process.
|
|
params:
|
|
service-user:
|
|
type: string
|
|
description: |
|
|
The name of the service as specified by the service user charm. e.g.
|
|
'cinder' for the cinder charm, 'glance' for the glance charm.
|
|
list-service-usernames:
|
|
description: |
|
|
List the usernames of the services as known by keystone. This may differ
|
|
from those expected due to either prefixes or a service providing multiple
|
|
endpoints. The service username passed to 'rotate-service-user-password'
|
|
needs to be one of this list.
|
|
openstack-upgrade:
|
|
description: |
|
|
Perform openstack upgrades. Config option action-managed-upgrade must be
|
|
set to True.
|
|
security-checklist:
|
|
description: |
|
|
Validate the running configuration against the OpenStack security guides
|
|
checklist.
|
|
get-admin-password:
|
|
description: Retrieve the admin password for the Keystone service.
|