Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 2266071

Summary: "Hardening Red Hat OpenStack Platform" guide doesn't provide recommendations how to rotate fernet tokens, passwords and keys
Product: Red Hat OpenStack Reporter: Alex Stupnikov <astupnik>
Component: documentationAssignee: Roger Heslop <rheslop>
Status: CLOSED MIGRATED QA Contact: RHOS Documentation Team <rhos-docs>
Severity: medium Docs Contact:
Priority: low    
Version: 17.1 (Wallaby)CC: dhill, fpiccion, mariel
Target Milestone: ---Keywords: Documentation, Triaged
Target Release: ---   
Hardware: All   
OS: All   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2024-12-11 16:56:07 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:

Description Alex Stupnikov 2024-02-26 15:56:06 UTC 
Description of problem:
Mistral is no longer there, so steps to rotate various entities were changed. At this point "Hardening Red Hat OpenStack Platform" guide only contains recommendations for SSH keys, while tripleo_ansible has playbooks for fernet tokens, passwords and so on.

Version-Release number of selected component (if applicable):
RHOSP 17.1
Comment 1 Roger Heslop 2024-02-27 14:44:04 UTC 
* https://opendev.org/openstack/tripleo-ansible/src/branch/stable/wallaby/tripleo_ansible/ansible_plugins/modules/tripleo_fernet_keys_rotate.py

* https://opendev.org/openstack/tripleo-ansible/src/branch/stable/wallaby/tripleo_ansible/playbooks/rotate-fernet-keys.yaml
Comment 2 Alex Stupnikov 2024-02-27 15:21:47 UTC 
We also have https://opendev.org/openstack/tripleo-ansible/src/branch/stable/wallaby/tripleo_ansible/playbooks/rotate-passwords.yaml and https://opendev.org/openstack/tripleo-ansible/src/branch/stable/wallaby/tripleo_ansible/playbooks/rotate-keys.yaml ..
Comment 9 Roger Heslop 2024-12-11 16:55:01 UTC 
This bug is migrated to Jira. You can track it at: https://issues.redhat.com/browse/RHOSPDOC-2194