33 lines
1.0 KiB
ReStructuredText
33 lines
1.0 KiB
ReStructuredText
`Home <index.html>`_ OpenStack-Ansible Installation Guide
|
|
|
|
Configuring service credentials
|
|
-------------------------------
|
|
|
|
Configure credentials for each service in the
|
|
``/etc/openstack_deploy/*_secrets.yml`` files. Consider using `Ansible
|
|
Vault <http://docs.ansible.com/playbooks_vault.html>`_ to increase
|
|
security by encrypting any files containing credentials.
|
|
|
|
Adjust permissions on these files to restrict access by non-privileged
|
|
users.
|
|
|
|
Note that the following options configure passwords for the web
|
|
interfaces:
|
|
|
|
- ``keystone_auth_admin_password`` configures the ``admin`` tenant
|
|
password for both the OpenStack API and dashboard access.
|
|
|
|
Recommended: Use the ``pw-token-gen.py`` script to generate random
|
|
values for the variables in each file that contains service credentials:
|
|
|
|
.. code-block:: shell-session
|
|
|
|
# cd /opt/openstack-ansible/scripts
|
|
# python pw-token-gen.py --file /etc/openstack_deploy/user_secrets.yml
|
|
|
|
To regenerate existing passwords, add the ``--regen`` flag.
|
|
|
|
--------------
|
|
|
|
.. include:: navigation.txt
|