openstack/openstack-ansible
Code Issues Proposed changes
Ansible playbooks for deploying OpenStack.
5,543 Commits 10 Branches 140 Tags 136 MiB
Python 61.4%
Shell 26.8%
Jinja 11.7%
Smarty 0.1%
f2a3c8ed69
Go to file
Jean-Philippe Evrard f2a3c8ed69 Prevent incorrect credentials 
Currently 3 sets of credentials are generated for MQ, per service:
- rabbitmq_password
- oslomsg_rpc_password
- oslomsg_notify_password

In each service, we should use x_oslomsg_rpc_password and
x_oslomsg_notify_password, and not rabbitmq.

However there is no wiring as of today. This could lead
to a username like nova, on a vhost nova, with 3 different
passwords. Only one would work.

This patch ensures the wiring is done by default, for all
the roles to be able to use x_oslomsg_notify_password and
x_oslomsg_rpc_password. This is done by always referencing,
in the notify part, the credentials to the rpc part.

The RPC part is then a reference to the rabbitmq_password, so
it's easy to upgrade from queens to Rocky without changes.

If a deployer wants to override the credentials, he can
do so by uncommenting the appropriate line in the
user_secrets. This would then override the existing group_vars
and wire the secrets appropriately. A new user should be
used in that case, as written in the comments.

Change-Id: I834bdc5a33f6b3c49452a9948c889caa79659f3c
2018-07-16 11:30:08 +00:00
deploy-guide/source Replace deprecated library function os.popen() with subprocess 2018-05-17 13:44:15 +00:00
doc [doc] Clarify attendance of Core Reviewers at PTG & Summit 2018-07-12 13:41:32 +02:00
etc Prevent incorrect credentials 2018-07-16 11:30:08 +00:00
inventory Prevent incorrect credentials 2018-07-16 11:30:08 +00:00
osa_toolkit Merge "Add a warning in openstack_hostnames_ips.yml" 2018-06-24 22:32:05 +00:00
playbooks Fix usage of "|" for tests 2018-07-12 16:44:21 +02:00
releasenotes Trivial: Update pypi url to new url 2018-06-25 07:23:59 +00:00
scripts Merge "Be consistent with memcached group name" 2018-07-12 14:08:57 +00:00
tests Merge "Fix usage of "|" for tests" 2018-07-15 16:29:22 +00:00
zuul.d Begin testing opensuse and centos with nspawn 2018-06-08 04:04:30 +00:00
.gitignore [docs] Remove mistaken static content in scenario table 2018-03-12 08:29:25 +00:00
.gitreview Update .gitreview for project rename 2015-09-11 20:58:10 +00:00
ansible-role-requirements.yml Unpin ceph-ansible and add ceph-ansible library path 2018-06-28 17:58:57 +00:00
ansible-role-requirements.yml.example Convert existing roles into galaxy roles 2015-02-18 10:56:25 +00:00
bindep.txt Update test tooling for manual testing 2017-12-11 15:44:41 +00:00
global-requirement-pins.txt Bump setuptool to 39.2.0 2018-06-16 17:47:04 -04:00
LICENSE.txt Correct path to callback plugins in gate script 2016-02-01 16:52:54 +00:00
README.rst Update links in README 2018-03-02 05:53:46 +00:00
requirements.txt Ensure python-keystoneclient has a lower bound 2018-07-02 07:36:21 +01:00
run_tests.sh Update run_tests.sh and remove tests-repo-clone.sh 2018-03-30 20:42:53 +00:00
setup.cfg Update URL home-page in documents according to document migration 2017-07-14 03:22:18 +00:00
setup.py Updated from global requirements 2017-03-02 11:51:03 +00:00
test-requirements.txt Follow the new PTI for document build 2018-03-09 12:37:18 +08:00
tox.ini Update run_tests.sh and remove tests-repo-clone.sh 2018-03-30 20:42:53 +00:00
Vagrantfile Vagrantfile: Use rsync to copy working directory to VM 2018-01-29 12:38:33 +00:00

README.rst

Team and repository tags

image

OpenStack-Ansible

OpenStack-Ansible is an official OpenStack project which aims to deploy production environments from source in a way that makes it scalable while also being simple to operate, upgrade, and grow.

For an overview of the mission, repositories and related Wiki home page, please see the formal Home Page for the project.

For those looking to test OpenStack-Ansible using an All-In-One (AIO) build, please see the Quick Start guide.

For more detailed Installation and Operator documentation, please see the Deployment Guide.

If OpenStack-Ansible is missing something you'd like to see included, then we encourage you to see the Developer Documentation for more details on how you can get involved.

Developers wishing to work on the OpenStack-Ansible project should always base their work on the latest code, available from the master GIT repository at Source.

If you have some questions, or would like some assistance with achieving your goals, then please feel free to reach out to us on the OpenStack Mailing Lists (particularly openstack-operators or openstack-dev) or on IRC in #openstack-ansible on the freenode network.

OpenStack-Ansible Roles

OpenStack-Ansible offers separate role repositories for each individual role that OpenStack-Ansible supports. For individual role configuration options, see the Role Documentation.

An individual role's source code can be found at: https://git.openstack.org/cgit/openstack/openstack-ansible-<ROLENAME>.