Generate a standalone stackrc
Previously the stackrc file made a hiera call to get the admin password. The problem with this is that it makes the stackrc file non-portable to any system except the undercloud. Writing the actual password into stackrc will allow it to work on any system that has network connectivity to the undercloud. Note that this does not have any negative impact on the security of the stackrc file since previously the user sourcing it would have had to have sudo access to read the password from hiera anyway. If anything this is more secure because it does not require allowing root access to any user of stackrc. Depends-On: I6ccb832b52a476b5fa659a9a8f09e38ae41d324b Change-Id: I7a6b665cf9d40889e8e72475887c7ce166e77a40
This commit is contained in:
parent
3a67a6c8cb
commit
ec15341ccd
@ -2,7 +2,7 @@
|
||||
for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
|
||||
NOVA_VERSION=1.1
|
||||
export NOVA_VERSION
|
||||
OS_PASSWORD=$(sudo hiera admin_password)
|
||||
OS_PASSWORD={{admin_password}}
|
||||
export OS_PASSWORD
|
||||
OS_AUTH_TYPE=password
|
||||
export OS_AUTH_TYPE
|
||||
|
@ -13,6 +13,7 @@
|
||||
"masquerade_networks": ["{{MASQUERADE_NETWORK}}"],
|
||||
"service_certificate": "{{UNDERCLOUD_SERVICE_CERTIFICATE}}",
|
||||
"public_host": "{{UNDERCLOUD_PUBLIC_HOST}}",
|
||||
"admin_password": "{{UNDERCLOUD_ADMIN_PASSWORD}}",
|
||||
"neutron": {
|
||||
"dhcp_start": "{{DHCP_START}}",
|
||||
"dhcp_end": "{{DHCP_END}}",
|
||||
|
Loading…
Reference in New Issue
Block a user