aboutsummaryrefslogtreecommitdiff
path: root/releasenotes/notes/update-keystone-passwords-7507119213391652.yaml
blob: 8a4546e5d7a559bbd0c7d826986ccdb1e0ea78af (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
---
fixes:
  - |
    Changes to service user passwords in ``passwords.yml`` will now be applied
    when reconfiguring services.

    This behaviour can reverted by setting
    ``update_keystone_service_user_passwords: false``.

    Fixes `LP#2045990
    <https://bugs.launchpad.net/kolla-ansible/+bug/2045990>`__
upgrade:
  - |
    If credentials are updated in ``passwords.yml`` kolla-ansible is now able
    to update these credentials in the keystone database and in the on disk
    config files.

    The changes to ``passwords.yml`` are applied once ``kolla-ansible -i
    INVENTORY`` reconfigure has been run.

    If you want to revert to the old behavior - credentials not automatically
    updating during reconfigure if they changed in ``passwords.yml`` - you can
    specify this by setting ``update_keystone_service_user_passwords: false``
    in your globals.yml.

    Notice that passwords are only changed if you change them in
    ``passwords.yml``. This mechanism is not a complete solution for automatic
    credential rollover. No passwords are changed if you do not change them
    inside ``passwords.yml``.