diff options
| author | Alex-Welsh <alex@stackhpc.com> | 2023-12-08 15:28:27 +0000 |
|---|---|---|
| committer | Alex-Welsh <alex@stackhpc.com> | 2024-01-29 15:05:09 +0000 |
| commit | ffd6e3bf329f59318317fba624bc7b1a88f3f7bb (patch) | |
| tree | 3968ff8673b4c21c52b7f646486b2c9474f5ac71 /ansible | |
| parent | 7a29abb5907e2f6bbd10b1dd68ba6bdc1ff7f542 (diff) | |
| download | kolla-ansible-ffd6e3bf329f59318317fba624bc7b1a88f3f7bb.tar.gz kolla-ansible-ffd6e3bf329f59318317fba624bc7b1a88f3f7bb.zip | |
Update keystone service user passwords
Service user passwords will now be updated in keystone if services are
reconfigured with new passwords set in config. This behaviour can be
overridden.
Closes-Bug: #2045990
Change-Id: I91671dda2242255e789b521d19348b0cccec266f
Diffstat (limited to 'ansible')
| -rw-r--r-- | ansible/group_vars/all.yml | 4 | ||||
| -rw-r--r-- | ansible/roles/magnum/tasks/register.yml | 1 | ||||
| -rw-r--r-- | ansible/roles/service-ks-register/tasks/main.yml | 1 |
3 files changed, 6 insertions, 0 deletions
diff --git a/ansible/group_vars/all.yml b/ansible/group_vars/all.yml index f512f5c03..6147b08f9 100644 --- a/ansible/group_vars/all.yml +++ b/ansible/group_vars/all.yml @@ -1019,6 +1019,10 @@ keystone_public_url: "{{ keystone_external_fqdn | kolla_url(public_protocol, key keystone_admin_user: "admin" keystone_admin_project: "admin" +# Whether or not to apply changes to service user passwords when services are +# reconfigured +update_keystone_service_user_passwords: true + default_project_domain_name: "Default" default_project_domain_id: "default" diff --git a/ansible/roles/magnum/tasks/register.yml b/ansible/roles/magnum/tasks/register.yml index 9c64cb58b..1d024041a 100644 --- a/ansible/roles/magnum/tasks/register.yml +++ b/ansible/roles/magnum/tasks/register.yml @@ -30,6 +30,7 @@ name: "{{ magnum_trustee_domain_admin }}" domain: "{{ magnum_trustee_domain }}" password: "{{ magnum_keystone_password }}" + update_password: "{{ 'always' if update_keystone_service_user_passwords | bool else 'on_create' }}" auth: "{{ openstack_magnum_auth }}" endpoint_type: "{{ openstack_interface }}" cacert: "{{ openstack_cacert }}" diff --git a/ansible/roles/service-ks-register/tasks/main.yml b/ansible/roles/service-ks-register/tasks/main.yml index 056a9fc70..813ea26ff 100644 --- a/ansible/roles/service-ks-register/tasks/main.yml +++ b/ansible/roles/service-ks-register/tasks/main.yml @@ -70,6 +70,7 @@ default_project: "{{ item.project }}" name: "{{ item.user }}" password: "{{ item.password }}" + update_password: "{{ 'always' if update_keystone_service_user_passwords | bool else 'on_create' }}" domain: "{{ service_ks_register_domain }}" region_name: "{{ service_ks_register_region_name }}" auth: "{{ service_ks_register_auth }}" |