From f03e06e09bc486a1a26d5642cce278d7dbb7bd92 Mon Sep 17 00:00:00 2001 From: SamYaple Date: Wed, 16 Mar 2016 21:45:25 +0000 Subject: Add generate_passwords.py to generate passwords As with all tools, this is a first pass at the generation. Perhaps we even want to move this into kolla/kolla/cmd and be generated with tox itself in the future. This tool, when run, will only populate empty fields that have no values meaning that it is safe to run repeatedly on the same file. Of note, there is no way to preserve comments in the file after it has been processed by the yaml parser in python. Comments and sections will remain in the passwords.yml template for additional documentation if the user wishes to populate the file themselves. Use SystemRandom and clean up the docs a bit to not use pronouns. Co-Authored-By: Steven Dake Closes-Bug: #1559266 Change-Id: I2932d592df8871f1b7811059206d0b4d0553a687 --- etc/kolla/passwords.yml | 77 +++++++++++++++++++++++-------------------------- 1 file changed, 36 insertions(+), 41 deletions(-) (limited to 'etc') diff --git a/etc/kolla/passwords.yml b/etc/kolla/passwords.yml index a98911c3b..5f250ac8c 100644 --- a/etc/kolla/passwords.yml +++ b/etc/kolla/passwords.yml @@ -1,66 +1,62 @@ --- -# TODO(SamYaple): This file should have generated values by default. Propose -# Ansible vault for locking down the secrets properly. - - ################### # Ceph options #################### -ceph_cluster_fsid: "5fba2fbc-551d-11e5-a8ce-01ef4c5cf93c" -rbd_secret_uuid: "bbc5b4d5-6fca-407d-807d-06a4f4a7bccb" - +# These options must be UUID4 values in string format +# XXXXXXXX-XXXX-4XXX-XXXX-XXXXXXXXXXXX +ceph_cluster_fsid: +rbd_secret_uuid: ################### # Database options #################### -database_password: "password" - +database_password: #################### # Docker options #################### +# This should only be set if you require a password for your Docker registry docker_registry_password: - #################### # OpenStack options #################### -keystone_admin_password: "password" -keystone_database_password: "password" +keystone_admin_password: +keystone_database_password: -glance_database_password: "password" -glance_keystone_password: "password" +glance_database_password: +glance_keystone_password: -nova_database_password: "password" -nova_api_database_password: "password" -nova_keystone_password: "password" +nova_database_password: +nova_api_database_password: +nova_keystone_password: -neutron_database_password: "password" -neutron_keystone_password: "password" -metadata_secret: "password" +neutron_database_password: +neutron_keystone_password: +metadata_secret: -cinder_database_password: "password" -cinder_keystone_password: "password" +cinder_database_password: +cinder_keystone_password: -swift_keystone_password: "password" -swift_hash_path_suffix: "kolla" -swift_hash_path_prefix: "kolla" +swift_keystone_password: +swift_hash_path_suffix: +swift_hash_path_prefix: -heat_database_password: "password" -heat_keystone_password: "password" -heat_domain_admin_password: "password" +heat_database_password: +heat_keystone_password: +heat_domain_admin_password: -murano_database_password: "password" -murano_keystone_password: "password" +murano_database_password: +murano_keystone_password: -ironic_database_password: "password" -ironic_keystone_password: "password" +ironic_database_password: +ironic_keystone_password: -magnum_database_password: "password" -magnum_keystone_password: "password" +magnum_database_password: +magnum_keystone_password: -mistral_database_password: "password" -mistral_keystone_password: "password" +mistral_database_password: +mistral_keystone_password: horizon_secret_key: "password" @@ -72,12 +68,11 @@ memcache_secret_key: "password" #################### # RabbitMQ options #################### -rabbitmq_password: "password" -rabbitmq_cluster_cookie: "password" - +rabbitmq_password: +rabbitmq_cluster_cookie: #################### # HAProxy options #################### -haproxy_password: "password" -keepalived_password: "password" +haproxy_password: +keepalived_password: -- cgit v1.2.3