openstack/tripleo-docs
Code Issues Proposed changes

Merge "DCN extraction should exclude Ceph variables"

Browse Source
This commit is contained in:
Zuul 2019-11-12 16:11:28 +00:00 committed by Gerrit Code Review
commit ac78b00099
1 changed files with 8 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

10
deploy-guide/source/features/distributed_compute_node.rst
View File

@ -344,7 +344,7 @@ deployment with the following command:
.. code-block:: bash .. code-block:: bash
openstack object save overcloud plan-environment.yaml openstack object save overcloud plan-environment.yaml
python -c "import yaml; data=yaml.safe_load(open('plan-environment.yaml').read()); print yaml.dump(dict(parameter_defaults=data['passwords']))" > passwords.yaml python -c "import yaml; data=yaml.safe_load(open('plan-environment.yaml').read()); print yaml.dump(dict(parameter_defaults=data['passwords']))" | grep -vi ceph > passwords.yaml
Use the passwords.yaml enviornment file generated by the previous command, or Use the passwords.yaml enviornment file generated by the previous command, or
reuse the environment file used to set the values for the control plane stack. reuse the environment file used to set the values for the control plane stack.
@ -353,7 +353,13 @@ reuse the environment file used to set the values for the control plane stack.
The `passwords.yaml` generated in the previous command contains sensitive The `passwords.yaml` generated in the previous command contains sensitive
security data such as passwords and TLS certificates that are used in the security data such as passwords and TLS certificates that are used in the
overcloud deployment. overcloud deployment. Some passwords in the file may be removed if
they are not needed by the DCN. For example, the passwords for
RabbitMQ, MySQL, Keystone, Nova and Neutron should be sufficient to
launch an instance. In the example above the Ceph passwords are
excluded so that DCN deployments which include Ceph do not reuse the
same Ceph password and instead new ones are generated per DCN
deployment.
Care should be taken to keep the file as secured as possible. Care should be taken to keep the file as secured as possible.