Go to file

Logan V b3425781ec Rebuild credential-key repo during keystone[0] rebuild

When the first Keystone container is rebult in an existing environment,
the credential key repository is overwritten with new keys and the
existing keys are overwritten on the other infrastructure hosts without
any migration taking place. This results in an irrevocable loss of
the keys used to encrypt the credentials.

Now we will collect keys from any existing credential keys on the other
containers and use them to rebuild the credential-key repo on the primary
container before performing a key migration and rotation.

If no keys are found on the other containers, we will perform a
credential_setup on the primary container and sync the keys, just
as we would have before.

Closes-Bug: #1667960
Change-Id: Ic616d397574573629273838fbf68ea3f6bdb0468

2017-03-04 02:46:39 +00:00

defaults

Cap the number of worker threads

2017-02-23 05:15:53 -05:00

doc

Use https instead of http for git.openstack.org

2017-02-06 17:01:49 +07:00

examples

[DOCS] Move keystone federation role docs

2016-08-16 08:46:08 +00:00

files

Implement keystone venv support

2015-10-14 13:59:47 -05:00

handlers

Remove Trusty support from os_keystone role

2016-12-15 13:18:55 +00:00

library

Resolved Keystone Federation bugs

2017-02-07 21:01:09 -06:00

README.rst

Team and repository tags

OpenStack-Ansible keystone

Ansible role that installs and configures OpenStack Keystone. Keystone is installed behind the Apache webserver listening on port 5000 and port 35357 by default.

Documentation for the project can be found at: http://docs.openstack.org/developer/openstack-ansible-os_keystone/ The project home is at: http://launchpad.net/openstack-ansible