Merge "docs: Add information about possible password leaking"

1 files changed, 10 insertions, 0 deletions

diff --git a/doc/source/admin/production-architecture-guide.rst b/doc/source/admin/production-architecture-guide.rst
index d1da7eaad..ced3571fa 100644
--- a/doc/source/admin/production-architecture-guide.rst
+++ b/doc/source/admin/production-architecture-guide.rst
@@ -14,6 +14,8 @@ Node types and services running on them
 A basic Kolla inventory consists of several types of nodes, known in Ansible as
 ``groups``.
 
+* Deployment - Host from which you're running kolla-ansible CLI
+
 * Control - Cloud controller nodes which host control services
   like APIs and databases. This group should have odd number of nodes for
   quorum.
@@ -29,6 +31,14 @@ A basic Kolla inventory consists of several types of nodes, known in Ansible as
 
 * Monitoring - Monitor nodes which host monitoring services.
 
+.. warning::
+
+   All hosts should be hardened and access to them should be limited,
+   because Ansible can leak administrative passwords and other secrets to
+   system log. The same leaked passwords can be observed in OpenSearch if
+   you're pushing your system logs there.
+
+
 Network configuration
 ~~~~~~~~~~~~~~~~~~~~~