commit 1a0c7d97165c1b38dc9f78b82ac6ec8519fcf80c
Author: Steven Hardy <email address hidden>
Date: Wed Dec 9 18:23:08 2015 +0000
Remove unsafe "unset" defaults
All of our sensitive parameters are defaulted to easily predictable
values, which is very bad from a security perspective because we don't
force clients to make sane choices thus risk deploying with the
predictable default values. tripleoclient supports generating random
values for all of these, so remove the defaults, for non-tripleoclient
usage we can create a developer-only environment with defaults.
Reviewed: https:/ /review. openstack. org/288057 /git.openstack. org/cgit/ openstack/ tripleo- heat-templates/ commit/ ?id=1a0c7d97165 c1b38dc9f78b82a c6ec8519fcf80c
Committed: https:/
Submitter: Jenkins
Branch: stable/liberty
commit 1a0c7d97165c1b3 8dc9f78b82ac6ec 8519fcf80c
Author: Steven Hardy <email address hidden>
Date: Wed Dec 9 18:23:08 2015 +0000
Remove unsafe "unset" defaults
All of our sensitive parameters are defaulted to easily predictable
values, which is very bad from a security perspective because we don't
force clients to make sane choices thus risk deploying with the
predictable default values. tripleoclient supports generating random
values for all of these, so remove the defaults, for non-tripleoclient
usage we can create a developer-only environment with defaults.
Related-Bug: #1516027 42cf179cba195fb 7770a1fc21c ad220df358c3ccc 31e3c2e7c14 1eea47a9e6add24 b006c69c42)
Change-Id: Ia0cf3b7e2de1aa
Depends-On: Ifb34b43fdedc55
(cherry picked from commit 293f19b2a41386e