openstack/openstack-ansible
Code Issues Proposed changes

Add release note about restricted .my.cnf distribution

Browse Source 
Change-Id: I0156300a900f194d717863e1aa0c314901ee2cdc
This commit is contained in:
Jesse Pretorius 2016-01-22 22:38:57 +00:00
parent f0fa77d6f1
commit 21b85bfd59
1 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

16
releasenotes/notes/limited-mycnf-distribution-61903b3b247db0ff.yaml Normal file
View File

@ -0,0 +1,16 @@
---
upgrade:
- The distribution of the ``.my.cnf`` database access configuration file
which contains sensitive root credentials has now been limited to only
be distributed to containers and hosts which require it for
troubleshooting purposes. It is recommended that this file be removed
from all hosts and containers. The only containers that should have
the file are the Utility container and the Galera containers. This may
be done by executing ``ansible 'all:!galera:!utility' -m shell -a 'rm
-f /root/.my.cnf'`` from the ``/opt/openstack-ansible/`` directory.
security:
- The distribution of the ``.my.cnf`` database access configuration file
which contains sensitive root credentials has now been limited to only
be distributed to containers and hosts which require it for
troubleshooting purposes.