This patch removes the old install guide. It is still accessible in the Mitaka section. Change-Id: I47ce62523edd14a1bb20deba3f40e1e0b2df223c Implements: blueprint osa-install-guide-overhaul
1.2 KiB
Configuring service credentials
Configure credentials for each service in the
/etc/openstack_deploy/*_secrets.yml files. Consider using
Ansible Vault
to increase security by encrypting any files containing credentials.
Adjust permissions on these files to restrict access by non-privileged users.
Note
The following options configure passwords for the web interfaces.
keystone_auth_admin_passwordconfigures theadmintenant-
password for both the OpenStack API and dashboard access.
Note
We recommend using the pw-token-gen.py script to
generate random values for the variables in each file that contains
service credentials:
# cd /opt/openstack-ansible/scripts
# python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml
To regenerate existing passwords, add the --regen
flag.
Warning
The playbooks do not currently manage changing passwords in an existing environment. Changing passwords and re-running the playbooks will fail and may break your OpenStack environment.