openstack/kolla-ansible
Code Issues Proposed changes
kolla-ansible/ansible/roles
History
Mark Goddard 09e29d0db9 Don't rotate keystone fernet keys during deploy 
When running deploy or reconfigure for Keystone,
ansible/roles/keystone/tasks/deploy.yml calls init_fernet.yml,
which runs /usr/bin/fernet-rotate.sh, which calls keystone-manage
fernet_rotate.

This means that a token can become invalid if the operator runs
deploy or reconfigure too often.

This change splits out fernet-push.sh from the fernet-rotate.sh
script, then calls fernet-push.sh after the fernet bootstrap
performed in deploy.

Change-Id: I824857ddfb1dd026f93994a4ac8db8f80e64072e
Closes-Bug: #1833729
2019-06-27 08:41:27 +00:00
..
aodh
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
barbican
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
baremetal
Merge "Add ansible_nodename (system hostname) to /etc/hosts"
2019-06-07 09:08:08 +00:00
bifrost
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
blazar
Merge "Use become for all docker tasks"
2019-06-07 10:47:23 +00:00
ceilometer
Merge "Remove ceilometer transformers config"
2019-06-13 19:24:18 +00:00
ceph
Make Ceph upgrade check Ceph release to avoid EPERM
2019-06-18 11:35:43 +02:00
certificates
Removing '/certificates' entry in generate.yml as this causes an
2019-03-27 09:26:58 -06:00
chrony
Support stop specific containers
2018-11-26 08:07:01 +00:00
cinder
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
cloudkitty
Merge "Use become for all docker tasks"
2019-06-07 10:47:23 +00:00
collectd
Support stop specific containers
2018-11-26 08:07:01 +00:00
common
Merge "Ingest non-standard Monasca logs"
2019-06-20 10:03:11 +00:00
congress
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
cyborg
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
designate
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
destroy
Add elasticsearch_datadir_volume
2019-02-25 19:30:33 +01:00
elasticsearch
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
etcd
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
freezer
Fix default deployment of freezer, use mariadb.
2019-06-18 15:12:36 -04:00
glance
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
gnocchi
Merge "Elevate privileges for copying gnocchi policy.json"
2019-06-13 19:24:17 +00:00
grafana
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
haproxy
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
haproxy-config
Allow separate listen port in haproxy-config templates
2018-12-27 15:45:50 -05:00
heat
Remove heat_watch_server_url configuration option
2019-06-13 17:58:46 +01:00
horizon
Remove Neutron LBaaS support
2019-06-07 13:50:19 +01:00
influxdb
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
ironic
Merge "Use become for all docker tasks"
2019-06-07 10:47:23 +00:00
iscsi
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
kafka
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
karbor
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
keystone
Don't rotate keystone fernet keys during deploy
2019-06-27 08:41:27 +00:00
kibana
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
kuryr
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
magnum
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
manila
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
mariadb
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
memcached
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
mistral
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
module-load
Load known, standard kernel modules from the host, not within containers
2018-10-11 10:26:34 +02:00
monasca
Merge "Remove obsolete roles middleware"
2019-06-13 19:24:20 +00:00
mongodb
Fix mongo command for supporting other port
2019-06-16 18:32:24 +08:00
multipathd
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
murano
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
neutron
Merge "Update service_provider for FWaaS v2"
2019-06-13 19:24:21 +00:00
nova
Merge "Remove nova-consoleauth"
2019-06-17 16:28:45 +00:00
nova-hyperv
Use keystone_*_url var in all configs
2019-03-06 15:08:26 -05:00
octavia
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
opendaylight
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
openvswitch
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
ovs-dpdk
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
panko
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
placement
Fix placement log perms in config.json
2019-06-13 08:22:21 +00:00
prechecks
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
prometheus
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
qdrouterd
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
qinling
Fix Qinling deployment and reconfigure
2019-06-19 16:16:19 -04:00
rabbitmq
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
rally
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
redis
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
sahara
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
searchlight
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
senlin
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
service-stop/tasks
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
skydive
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
solum
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
storm
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
swift
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
tacker
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
telegraf
Fix Telegraf configuration template
2019-01-04 12:11:39 +00:00
tempest
Fix tempest.conf permissions
2019-03-07 15:50:41 +01:00
trove
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
vitrage
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
vmtp
Fixes VMTP deploys.
2019-05-29 16:20:01 +03:00
watcher
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
zookeeper
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
zun
Use become for all docker tasks
2019-06-06 19:04:58 +01:00
ceph_pools.yml
Use become for all docker tasks
2019-06-06 19:04:58 +01:00