Merge "DCN extraction should exclude Ceph variables"

This commit is contained in:
Zuul 2019-11-12 16:11:28 +00:00 committed by Gerrit Code Review
commit ac78b00099

View File

@ -344,7 +344,7 @@ deployment with the following command:
.. code-block:: bash
openstack object save overcloud plan-environment.yaml
python -c "import yaml; data=yaml.safe_load(open('plan-environment.yaml').read()); print yaml.dump(dict(parameter_defaults=data['passwords']))" > passwords.yaml
python -c "import yaml; data=yaml.safe_load(open('plan-environment.yaml').read()); print yaml.dump(dict(parameter_defaults=data['passwords']))" | grep -vi ceph > passwords.yaml
Use the passwords.yaml enviornment file generated by the previous command, or
reuse the environment file used to set the values for the control plane stack.
@ -353,7 +353,13 @@ reuse the environment file used to set the values for the control plane stack.
The `passwords.yaml` generated in the previous command contains sensitive
security data such as passwords and TLS certificates that are used in the
overcloud deployment.
overcloud deployment. Some passwords in the file may be removed if
they are not needed by the DCN. For example, the passwords for
RabbitMQ, MySQL, Keystone, Nova and Neutron should be sufficient to
launch an instance. In the example above the Ceph passwords are
excluded so that DCN deployments which include Ceph do not reuse the
same Ceph password and instead new ones are generated per DCN
deployment.
Care should be taken to keep the file as secured as possible.