diff options
| author | Michal Nasiadka <mnasiadka@gmail.com> | 2026-04-01 15:35:13 +0200 |
|---|---|---|
| committer | Michal Nasiadka <mnasiadka@gmail.com> | 2026-04-15 14:17:01 +0200 |
| commit | a80b14c1e9ddc39ee7cf0e6050400d6daf43fe24 (patch) | |
| tree | 7fc27140c505c1a5f2b1430f96b0a058cb47f165 /doc | |
| parent | a69e952ccdd0e4ae3885f061fb14b3c5926bd17d (diff) | |
| download | kolla-ansible-a80b14c1e9ddc39ee7cf0e6050400d6daf43fe24.tar.gz kolla-ansible-a80b14c1e9ddc39ee7cf0e6050400d6daf43fe24.zip | |
kolla-toolbox: Template clouds.yaml and use it
Basically Ansible heuristic obfuscation methods mark auth:
that we pass to openstack.* modules as no_log_values and then
obfuscates it's values in other runs (which then end up as ****
e.g. auth_url, domain_id, domain name, etc)
Example return:
"domains": [
{
"description": "The ******** domain",
"id": "VALUE_SPECIFIED_IN_NO_LOG_PARAMETER",
"is_enabled": true,
"links": {
"self": "********/v3/domains/********"
},
"name": "Default",
"options": {},
"tags": []
}
This patch adds clouds.yaml to files templated for kolla-toolbox
(but without the password) and only uses password from Kolla-Ansible
secrets instead of storing that on disk on all of the nodes.
Change-Id: I479445563d5b5dc2e45601e936d89def647da841
Signed-off-by: Michal Nasiadka <mnasiadka@gmail.com>
Diffstat (limited to 'doc')
| -rw-r--r-- | doc/source/user/multi-regions.rst | 8 |
1 files changed, 0 insertions, 8 deletions
diff --git a/doc/source/user/multi-regions.rst b/doc/source/user/multi-regions.rst index dcee26d16..50040962c 100644 --- a/doc/source/user/multi-regions.rst +++ b/doc/source/user/multi-regions.rst @@ -71,14 +71,6 @@ the value of ``kolla_internal_fqdn`` in RegionOne: keystone_internal_url: "{{ internal_protocol }}://{{ kolla_internal_fqdn_r1 }}:{{ keystone_public_port }}" - openstack_auth: - auth_url: "{{ keystone_internal_url }}" - username: "{{ keystone_admin_user }}" - password: "{{ keystone_admin_password }}" - user_domain_name: "{{ default_user_domain_name }}" - project_name: "{{ keystone_admin_project }}" - domain_name: "default" - .. note:: If the ``kolla_internal_vip_address`` and/or the |
