openstack-ansible/releasenotes/notes/limited-mycnf-distribution-61903b3b247db0ff.yaml
Jesse Pretorius 21b85bfd59 Add release note about restricted .my.cnf distribution
Change-Id: I0156300a900f194d717863e1aa0c314901ee2cdc
2016-02-01 17:13:35 +00:00

17 lines
849 B
YAML

---
upgrade:
- The distribution of the ``.my.cnf`` database access configuration file
which contains sensitive root credentials has now been limited to only
be distributed to containers and hosts which require it for
troubleshooting purposes. It is recommended that this file be removed
from all hosts and containers. The only containers that should have
the file are the Utility container and the Galera containers. This may
be done by executing ``ansible 'all:!galera:!utility' -m shell -a 'rm
-f /root/.my.cnf'`` from the ``/opt/openstack-ansible/`` directory.
security:
- The distribution of the ``.my.cnf`` database access configuration file
which contains sensitive root credentials has now been limited to only
be distributed to containers and hosts which require it for
troubleshooting purposes.