openstack-ansible/doc/source/install-guide/configure-creds.rst
Kevin Carter 35ec780515 Rename everything for the osad to osa name change
This change updates all fo the names that we were using to the post
openstack migration name for openstack-ansible.

Change-Id: I6524af53ed02e19a0f56908e42a65d2dae8b71e3
2015-09-12 02:31:21 +01:00

1.1 KiB

Home OpenStack Ansible Installation Guide

Configuring service credentials

Configure credentials for each service in the /etc/openstack_deploy/*_secrets.yml files. Consider using Ansible Vault to increase security by encrypting any files containing credentials.

Adjust permissions on these files to restrict access by non-privileged users.

Note that the following options configure passwords for the web interfaces:

  • keystone_auth_admin_password configures the admin tenant password for both the OpenStack API and dashboard access.
  • kibana_password configures the password for Kibana web interface access.

Recommended: Use the pw-token-gen.py script to generate random values for the variables in each file that contains service credentials:

$ cd /opt/openstack-ansible/scripts
$ python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml

To regenerate existing passwords, add the --regen flag.