diff --git a/doc/source/install-guide/app-minorupgrade.rst b/doc/source/install-guide/app-minorupgrade.rst index d698e6bcad..d5e58e890a 100644 --- a/doc/source/install-guide/app-minorupgrade.rst +++ b/doc/source/install-guide/app-minorupgrade.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Appendix C. Minor Upgrades -------------------------- diff --git a/doc/source/install-guide/app-plumgrid.rst b/doc/source/install-guide/app-plumgrid.rst index 71461422a0..d4922c594e 100644 --- a/doc/source/install-guide/app-plumgrid.rst +++ b/doc/source/install-guide/app-plumgrid.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Appendix E. Using PLUMgrid Neutron Plugin ----------------------------------------- diff --git a/doc/source/install-guide/app-tips.rst b/doc/source/install-guide/app-tips.rst index a3e0ec5df0..183ee09f2c 100644 --- a/doc/source/install-guide/app-tips.rst +++ b/doc/source/install-guide/app-tips.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Appendix D. Tips and Tricks --------------------------- diff --git a/doc/source/install-guide/configure-federation-idp-adfs.rst b/doc/source/install-guide/configure-federation-idp-adfs.rst index 5873c5c71a..63d84ded7b 100644 --- a/doc/source/install-guide/configure-federation-idp-adfs.rst +++ b/doc/source/install-guide/configure-federation-idp-adfs.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Configure Active Directory Federation Services (ADFS) 3.0 as an identity provider ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/source/install-guide/configure-federation-idp.rst b/doc/source/install-guide/configure-federation-idp.rst index 8215badafb..769b40c5cb 100644 --- a/doc/source/install-guide/configure-federation-idp.rst +++ b/doc/source/install-guide/configure-federation-idp.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Configure Identity Service (keystone) as a federated identity provider ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/source/install-guide/configure-federation-mapping.rst b/doc/source/install-guide/configure-federation-mapping.rst index e72d829c8f..b0cda56634 100644 --- a/doc/source/install-guide/configure-federation-mapping.rst +++ b/doc/source/install-guide/configure-federation-mapping.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Configure Identity Service (keystone) Domain-Project-Group-Role mappings ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/source/install-guide/configure-federation-sp-overview.rst b/doc/source/install-guide/configure-federation-sp-overview.rst index 7e2aa4f8af..7d9a6dd5d6 100644 --- a/doc/source/install-guide/configure-federation-sp-overview.rst +++ b/doc/source/install-guide/configure-federation-sp-overview.rst @@ -1,9 +1,9 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Identity Service (keystone) service provider background ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ -In openstack-ansible (OSA) the Identity Service (keystone) is set up to +In OpenStack-Ansible (OSA) the Identity Service (keystone) is set up to use Apache with mod_wsgi. The additional configuration of keystone as a federation service provider adds Apache mod_shib and configures it to respond to specific locations requests diff --git a/doc/source/install-guide/configure-federation-sp.rst b/doc/source/install-guide/configure-federation-sp.rst index 0fd1d005fa..7ff8d9e92e 100644 --- a/doc/source/install-guide/configure-federation-sp.rst +++ b/doc/source/install-guide/configure-federation-sp.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Configure Identity Service (keystone) as a federated service provider --------------------------------------------------------------------- diff --git a/doc/source/install-guide/configure-federation-use-case.rst b/doc/source/install-guide/configure-federation-use-case.rst index 8aa11f0ddf..e95d9579c4 100644 --- a/doc/source/install-guide/configure-federation-use-case.rst +++ b/doc/source/install-guide/configure-federation-use-case.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Identity Service to Identity Service federation example use-case ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/source/install-guide/configure-federation-wrapper.rst b/doc/source/install-guide/configure-federation-wrapper.rst index af04ccda6f..b7b6fc2aa2 100644 --- a/doc/source/install-guide/configure-federation-wrapper.rst +++ b/doc/source/install-guide/configure-federation-wrapper.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Using Identity Service to Identity Service federation ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ @@ -42,7 +42,7 @@ Unfortunately, many of the steps above involve manually sending API requests. The infrastructure for the command line utilities to perform all these steps for the user does not yet exist. -To simplify the task of obtaining access to a SP cloud, OpenStack Ansible provides a script that wraps the above steps. The script is called ``federated-login.sh`` and is +To simplify the task of obtaining access to a SP cloud, OpenStack-Ansible provides a script that wraps the above steps. The script is called ``federated-login.sh`` and is used as follows:: # ./scripts/federated-login.sh -p project [-d domain] sp_id diff --git a/doc/source/install-guide/configure-federation.rst b/doc/source/install-guide/configure-federation.rst index 899fa11eef..b9e85bcd3a 100644 --- a/doc/source/install-guide/configure-federation.rst +++ b/doc/source/install-guide/configure-federation.rst @@ -1,4 +1,4 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Configuring Identity Service federation (optional) ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ diff --git a/doc/source/install-guide/configure-haproxy.rst b/doc/source/install-guide/configure-haproxy.rst index f19d7782ac..f67495ccf2 100644 --- a/doc/source/install-guide/configure-haproxy.rst +++ b/doc/source/install-guide/configure-haproxy.rst @@ -79,7 +79,7 @@ in your ``/etc/openstack_deploy/user_variables.yml``: Securing HAProxy communication with SSL certificates #################################################### -The openstack-ansible project provides the ability to secure HAProxy +The OpenStack-Ansible project provides the ability to secure HAProxy communications with self-signed or user-provided SSL certificates. Refer to `Securing services with SSL certificates`_ for available configuration diff --git a/doc/source/install-guide/configure-horizon.rst b/doc/source/install-guide/configure-horizon.rst index 3146756da0..407c943a63 100644 --- a/doc/source/install-guide/configure-horizon.rst +++ b/doc/source/install-guide/configure-horizon.rst @@ -9,7 +9,7 @@ Customizing the Horizon deployment is done within Securing Horizon communication with SSL certificates ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -The openstack-ansible project provides the ability to secure Horizon +The OpenStack-Ansible project provides the ability to secure Horizon communications with self-signed or user-provided SSL certificates. Refer to `Securing services with SSL certificates`_ for available configuration diff --git a/doc/source/install-guide/configure-keystone.rst b/doc/source/install-guide/configure-keystone.rst index dbc0aaf531..e2e89361af 100644 --- a/doc/source/install-guide/configure-keystone.rst +++ b/doc/source/install-guide/configure-keystone.rst @@ -9,7 +9,7 @@ Customizing the Keystone deployment is done within Securing Keystone communication with SSL certificates ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -The openstack-ansible project provides the ability to secure Keystone +The OpenStack-Ansible project provides the ability to secure Keystone communications with self-signed or user-provided SSL certificates. Refer to `Securing services with SSL certificates`_ for available configuration diff --git a/doc/source/install-guide/configure-rabbitmq.rst b/doc/source/install-guide/configure-rabbitmq.rst index 633b0a39ef..4e6bfb6408 100644 --- a/doc/source/install-guide/configure-rabbitmq.rst +++ b/doc/source/install-guide/configure-rabbitmq.rst @@ -4,7 +4,7 @@ Configuring RabbitMQ (optional) ------------------------------- RabbitMQ provides the messaging broker for various OpenStack services. The -openstack-ansible project configures a plaintext listener on port 5672 and +OpenStack-Ansible project configures a plaintext listener on port 5672 and a SSL/TLS encrypted listener on port 5671. Customizing the RabbitMQ deployment is done within @@ -13,7 +13,7 @@ Customizing the RabbitMQ deployment is done within Add a TLS encrypted listener to RabbitMQ ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ -The openstack-ansible project provides the ability to secure RabbitMQ +The OpenStack-Ansible project provides the ability to secure RabbitMQ communications with self-signed or user-provided SSL certificates. Refer to `Securing services with SSL certificates`_ for available configuration options. diff --git a/doc/source/install-guide/configure-sslcertificates.rst b/doc/source/install-guide/configure-sslcertificates.rst index 86a1b612ef..56bb14b35b 100644 --- a/doc/source/install-guide/configure-sslcertificates.rst +++ b/doc/source/install-guide/configure-sslcertificates.rst @@ -8,7 +8,7 @@ deployment is highly recommended in the `OpenStack Security Guide`_. .. _OpenStack Security Guide: http://docs.openstack.org/security-guide/secure-communication.html -The openstack-ansible project currently offers the ability to configure SSL +The OpenStack-Ansible project currently offers the ability to configure SSL certificates for secure communication with the following services: * HAProxy @@ -32,7 +32,7 @@ Self-signed certificates Self-signed certificates make it easy to get started quickly and they ensure data is encrypted in transit, but they don't provide a high level of trust for highly secure environments. The use of self-signed certificates is -currently the default in openstack-ansible. When self-signed certificates are +currently the default in OpenStack-Ansible. When self-signed certificates are being used, certificate verification must be disabled using the following user variables depending on your configuration. These variables can be added in ``/etc/openstack_deploy/user_variables.yml``. diff --git a/doc/source/install-guide/overview-security.rst b/doc/source/install-guide/overview-security.rst index 213e3810f8..d3243b2d3a 100644 --- a/doc/source/install-guide/overview-security.rst +++ b/doc/source/install-guide/overview-security.rst @@ -1,9 +1,9 @@ -`Home `__ OpenStack Ansible Installation Guide +`Home `__ OpenStack-Ansible Installation Guide Security -------- -The openstack-ansible project provides several security features for +The OpenStack-Ansible project provides several security features for OpenStack deployments. This section of documentation covers some of those features and how they can benefit deployers of various sizes. @@ -24,7 +24,7 @@ specific limits and policies around what resources a particular application can access. Any activity outside the allowed policies is denied at the kernel level. -In openstack-ansible, AppArmor profiles are applied that limit the actions +In OpenStack-Ansible, AppArmor profiles are applied that limit the actions that each LXC container may take on a system. This is done within the `lxc_hosts role`_. @@ -37,7 +37,7 @@ Encrypted communication ~~~~~~~~~~~~~~~~~~~~~~~ Data is encrypted while in transit between some OpenStack services in -openstack-ansible deployments. Not all communication between all services is +OpenStack-Ansible deployments. Not all communication between all services is currently encrypted. For more details on what traffic is encrypted, and how to configure SSL certificates, refer to the documentation section titled `Securing services with SSL certificates`_.