starlingx/docs
Code Issues Proposed changes
docs/doc/source/security/kubernetes/manage-keystone-accounts.rst
Rafael Jardim d95c80d36f Update Security 
Fixed merge conflict (RS)

Signed-off-by: Rafael Jardim <rafaeljordao.jardim@windriver.com>
Change-Id: I30b882a14196525f440db1108a56bbf862dfaf55
Signed-off-by: Ron Stone <ronald.stone@windriver.com>
2021-04-01 16:02:36 -04:00

1.8 KiB
Raw Blame History

Manage Keystone Accounts

See https://docs.openstack.org/keystone/pike/admin/cli-manage-projects-users-and-roles.html _ for details on managing Keystone projects, users, and roles.

All Kubernetes accounts are subject to system password rules. For complete details on password rules, see System Account Password Rules <starlingx-system-accounts-system-account-password-rules>.

If you are using when changing the keystone 'admin' user password, you must:

  1. If the deployment-config.yaml file has been moved off-box for security reasons, upload the file back to the system to be updated.

    Warning

    The deployment-config.yaml file includes sensitive information (including system credentials and passwords). For increased security, it is recommended to store the deployment-config.yaml in a safe location off-box. Upload the file to the system only when it is required (during initial configuration, and when reapplying an updated configuration).

  2. Update the password in the 'system-endpoint' secret in the 's deployment-config.yaml file, with the new keystone 'admin' user password. Make this change to the OS_PASSWORD value. It must be base64 encoded. For example:

    OS_PASSWORD: U3Q4cmxpbmdYKg==

  3. Apply the updated deployment configuration.

    kubectl apply -f deployment-config.yaml

  4. (Optional) For security reasons, copy the updated deployment-config.yaml file off-box and delete it from the system.