diff options
| author | Michal Nasiadka <mnasiadka@gmail.com> | 2025-09-02 19:00:30 +0200 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2026-01-14 09:23:59 +0000 |
| commit | e566fbf6de9b306be8b5c895f2ed091c0bca8bc5 (patch) | |
| tree | d82d2698c8b16a2b1adf12b2da839a346a225bb0 /doc/source/admin | |
| parent | a3f2741dec7955d22d8491cda2dd38a4c82df9f2 (diff) | |
| download | kolla-ansible-e566fbf6de9b306be8b5c895f2ed091c0bca8bc5.tar.gz kolla-ansible-e566fbf6de9b306be8b5c895f2ed091c0bca8bc5.zip | |
docs: Add information about possible password leaking
Closes-Bug: #2120302
Change-Id: Ideb7974796ba503a2ac979a321b9c6f27c7c22a1
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Diffstat (limited to 'doc/source/admin')
| -rw-r--r-- | doc/source/admin/production-architecture-guide.rst | 10 |
1 files changed, 10 insertions, 0 deletions
diff --git a/doc/source/admin/production-architecture-guide.rst b/doc/source/admin/production-architecture-guide.rst index d1da7eaad..ced3571fa 100644 --- a/doc/source/admin/production-architecture-guide.rst +++ b/doc/source/admin/production-architecture-guide.rst @@ -14,6 +14,8 @@ Node types and services running on them A basic Kolla inventory consists of several types of nodes, known in Ansible as ``groups``. +* Deployment - Host from which you're running kolla-ansible CLI + * Control - Cloud controller nodes which host control services like APIs and databases. This group should have odd number of nodes for quorum. @@ -29,6 +31,14 @@ A basic Kolla inventory consists of several types of nodes, known in Ansible as * Monitoring - Monitor nodes which host monitoring services. +.. warning:: + + All hosts should be hardened and access to them should be limited, + because Ansible can leak administrative passwords and other secrets to + system log. The same leaked passwords can be observed in OpenSearch if + you're pushing your system logs there. + + Network configuration ~~~~~~~~~~~~~~~~~~~~~ |