openstack/tripleo-docs
Code Issues Proposed changes

Add keystone credential-keys and fernet-keys clarification when restoring the Undercloud

Browse Source 
We need to be sure that when puppet configures the Undercloud we reuse the keys in the
folders credential-keys and fernet-keys.

Otherwise we will have keystone issues.

Change-Id: Ib9274f28e9163753821abd7b430b2b1117aac622
This commit is contained in:
Carlos Camacho 2018-06-06 17:03:17 +02:00
parent 16005971f0
commit 4402f059e7
1 changed files with 12 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

12
doc/source/install/controlplane_backup_restore/03_undercloud_restore.rst
View File

@ -101,6 +101,18 @@ certificates and hieradata with the backup content:
sudo rsync -a /var/tmp/test_bk_down/srv/node/ /srv/node/
sudo rsync -a /var/tmp/test_bk_down/var/lib/glance/ /var/lib/glance/
The Keystone configuration files need to be synchronized
before reinstalling the Undercloud node. This is needed
because we need to have the same keys in the folders
`credential-keys` and `fernet-keys` so they don't get regenerated
when running the puppet Undercloud configuration.
Take into account that the package `openstack-keystone` needs to be installed
before synchronizing its configuration data:
::
sudo rsync -a /var/tmp/test_bk_down/etc/keystone/ /etc/keystone/
If the user is using SSL, you need to refresh the CA certificate:
::