Generate a standalone stackrc

Previously the stackrc file made a hiera call to get the admin
password.  The problem with this is that it makes the stackrc file
non-portable to any system except the undercloud.  Writing the
actual password into stackrc will allow it to work on any system
that has network connectivity to the undercloud.

Note that this does not have any negative impact on the security
of the stackrc file since previously the user sourcing it would have
had to have sudo access to read the password from hiera anyway.  If
anything this is more secure because it does not require allowing
root access to any user of stackrc.

Depends-On: I6ccb832b52a476b5fa659a9a8f09e38ae41d324b
Change-Id: I7a6b665cf9d40889e8e72475887c7ce166e77a40
This commit is contained in:
Ben Nemec 2017-09-29 19:01:49 +00:00 committed by Ben Nemec
parent 3a67a6c8cb
commit ec15341ccd
2 changed files with 2 additions and 1 deletions

View File

@ -2,7 +2,7 @@
for key in $( set | awk '{FS="="} /^OS_/ {print $1}' ); do unset $key ; done
NOVA_VERSION=1.1
export NOVA_VERSION
OS_PASSWORD=$(sudo hiera admin_password)
OS_PASSWORD={{admin_password}}
export OS_PASSWORD
OS_AUTH_TYPE=password
export OS_AUTH_TYPE

View File

@ -13,6 +13,7 @@
"masquerade_networks": ["{{MASQUERADE_NETWORK}}"],
"service_certificate": "{{UNDERCLOUD_SERVICE_CERTIFICATE}}",
"public_host": "{{UNDERCLOUD_PUBLIC_HOST}}",
"admin_password": "{{UNDERCLOUD_ADMIN_PASSWORD}}",
"neutron": {
"dhcp_start": "{{DHCP_START}}",
"dhcp_end": "{{DHCP_END}}",