openstack
/
fuel-menu
Code Issues Proposed changes

Ensure service_token_off is set in save-only 

Deletes keystone service token after deploying
keystone to minimize security risk.

This additional patch is required because save only
and normal application modes configure settings
independently. In master branch, this is already
functioning together without requiring this patch.

Change-Id: I70f10f46330a5d1fbaeb8812299747660017569b
Depends-On: I776644f727ce086369954f383a09b48b60bf11a5
Closes-Bug: #1582893
This commit is contained in:
Matthew Mosesohn 2016-06-09 12:43:34 +03:00
parent f280de0e35
commit 0ed9e206ed
1 changed files with 1 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

1
fuelmenu/fuelmenu.py
View File

@ -421,6 +421,7 @@ def save_only(iface, settingsfile=consts.SETTINGS_FILE):
"keystone/nailgun_password": pwgen.password(),
"keystone/monitord_user": "monitord",
"keystone/monitord_password": pwgen.password(),
"keystone/service_token_off": "true",
"mcollective/user": "mcollective",
"mcollective/password": pwgen.password(),
"postgres/keystone_dbname": "keystone",