06708191d6
This commit does the following: - sets all shell prompts in code-blocks to the root prompt - uses shell-session code-block since the shell prompt was being treated as a comment - links configure-aodh.rst in configure.rst (running tox was complaining that this file wasn't being linked anywhere) - other minor cleanup Change-Id: I9e3ac8bb0cabd1cc17952cfd765dbb0d8f7b6fa2
36 lines
1.1 KiB
ReStructuredText
36 lines
1.1 KiB
ReStructuredText
`Home <index.html>`_ OpenStack-Ansible Installation Guide
|
|
|
|
Configuring service credentials
|
|
-------------------------------
|
|
|
|
Configure credentials for each service in the
|
|
``/etc/openstack_deploy/*_secrets.yml`` files. Consider using `Ansible
|
|
Vault <http://docs.ansible.com/playbooks_vault.html>`_ to increase
|
|
security by encrypting any files containing credentials.
|
|
|
|
Adjust permissions on these files to restrict access by non-privileged
|
|
users.
|
|
|
|
Note that the following options configure passwords for the web
|
|
interfaces:
|
|
|
|
- ``keystone_auth_admin_password`` configures the ``admin`` tenant
|
|
password for both the OpenStack API and dashboard access.
|
|
|
|
- ``kibana_password`` configures the password for Kibana web interface
|
|
access.
|
|
|
|
Recommended: Use the ``pw-token-gen.py`` script to generate random
|
|
values for the variables in each file that contains service credentials:
|
|
|
|
.. code-block:: shell-session
|
|
|
|
# cd /opt/openstack-ansible/scripts
|
|
# python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml
|
|
|
|
To regenerate existing passwords, add the ``--regen`` flag.
|
|
|
|
--------------
|
|
|
|
.. include:: navigation.txt
|