openstack/openstack-ansible
Code Issues Proposed changes
7431aafa86
openstack-ansible/doc/source/install-guide/configure-creds.rst
kevin f9f907732e Port basic installation guide 
Convert RPC installation guide from DocBook to RST,
remove content specific to Rackspace, and create initial
OSAD installation guide.

Change-Id: I3eedadc8ba441b4d931720dd6e3f7f3489302a9c
Co-Authored-By: Matt Kassawara <mkassawara@gmail.com>
2015-06-11 09:17:56 -05:00

1.1 KiB
Raw Blame History

Home OpenStack Ansible Installation Guide

Configuring service credentials

Configure credentials for each service in the /etc/openstack_deploy/*_secrets.yml files. Consider using Ansible Vault to increase security by encrypting any files containing credentials.

Adjust permissions on these files to restrict access by non-privileged users.

Note that the following options configure passwords for the web interfaces:

  • keystone_auth_admin_password configures the admin tenant password for both the OpenStack API and dashboard access.
  • kibana_password configures the password for Kibana web interface access.

Recommended: Use the pw-token-gen.py script to generate random values for the variables in each file that contains service credentials:

$ cd /opt/os-ansible-deployment/scripts
$ python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml

To regenerate existing passwords, add the --regen flag.