2.2. 轮转服务帐户密码
您可以为安全或合规目的轮转服务密码。使用 rotate-passwords.yaml
ansible playbook 完成此任务。
流程
创建当前密码文件备份:
cp overcloud-deploy/overcloud/overcloud-passwords.yaml \ overcloud-deploy/overcloud/overcloud-passwords.yaml.old
运行
rotate-passwords.yaml
ansible playbook:ansible-playbook -i ./tripleo-deploy/undercloud/tripleo-ansible-inventory.yaml \ /usr/share/ansible/tripleo-playbooks/rotate-passwords.yaml
输出示例
[WARNING]: Invalid characters were found in group names but not replaced, use -vvvv to see details PLAY [Rotate passwords] ************************************************************************************************************************************************************************************ TASK [Set passwords environment file path] ***************************************************************************************************************************************************************** ok: [undercloud-0] TASK [Rotate passwords] ************************************************************************************************************************************************************************************ changed: [undercloud-0] TASK [Create rotated password parameter fact] ************************************************************************************************************************************************************** ok: [undercloud-0] TASK [Update existing password environment file] *********************************************************************************************************************************************************** changed: [undercloud-0] PLAY RECAP ************************************************************************************************************************************************************************************************* undercloud-0 : ok=4 changed=2 unreachable=0 failed=0 skipped=0 rescued=0 ignored=0