| commit | 609d32f399d05bab29a1ca0607cd28490f3d1ea1 | [log] [tgz] |
|---|---|---|
| author | azvyagintsev <azvyagintsev@mirantis.com> | Thu Jan 17 13:47:01 2019 +0200 |
| committer | Ivan Berezovskiy <iberezovskiy@mirantis.com> | Tue Mar 12 11:48:14 2019 +0000 |
| tree | 283f56b1f95e9d09c39ed07a799033c58135fd1f | |
| parent | aed376eb31a763588717b7754a06f54879ae5dff [diff] |
Drop static passwords For security reasons, all passwords must be generated. That's why all password related parameters has been moved to defaults but commented out, so they will be required and one have to set needed parameters if any of them used but missing, and also to have a reference. Exclusions: - `opencontrail_message_queue_password` must be defined due of limitations in OpenContrail over OpenStack - `rabbitmq_guest_password` for backward compatibility - `keepalived_openstack_telemetry_vip_password` for backward compatibility - `gerrit_ldap_bind_password` for backward compatibility - `opencontrail_identity_password` for backward compatibility - `kubernetes_openstack_provider_cloud_password` for backward compatibility Depends-on: https://gerrit.mcp.mirantis.com/#/c/34073/ Depends-on: https://gerrit.mcp.mirantis.com/#/c/36474/ Depends-on: https://gerrit.mcp.mirantis.com/#/c/36650/ Depends-on: https://gerrit.mcp.mirantis.com/#/c/36656/ Prod-related: PROD-26560 (PROD:26560) Change-Id: Ia2203cf59349850ecd55c89208285e65b65899cd
diff --git a/rabbitmq/server/vhost/openstack/init.yml b/rabbitmq/server/vhost/openstack/init.yml index 50b0814..5b440e7 100644 --- a/rabbitmq/server/vhost/openstack/init.yml +++ b/rabbitmq/server/vhost/openstack/init.yml
@@ -8,7 +8,7 @@ '/': enabled: true user: guest - password: guest + password: ${_param:rabbitmq_guest_password} policies: - name: HA pattern: '^(?!amq\.).*'