Merge pull request #4539 from edx/bderusha/password-rollout-config

Add PASSWORD_POLICY_COMPLIANCE_ROLLOUT_CONFIG

CHANGELOG.md

+- Role: edxapp
+  - Added `PASSWORD_POLICY_COMPLIANCE_ROLLOUT_CONFIG` to make configurable whether password complexity is checked on login and how such complexity is rolled out to users.
+
 - Role: certs
   - Added `CERTS_QUEUE_POLL_FREQUENCY` to make configurable the certificate agent's queue polling frequency.
 

playbooks/roles/edxapp/defaults/main.yml

@@ -857,6 +857,9 @@ EDXAPP_SCORM_PLAYER_LOCAL_STORAGE_ROOT: !!null
 # maintenance banner message (only actually enabled via waffle switch)
 EDXAPP_MAINTENANCE_BANNER_TEXT: "Sample banner message"
 
+EDXAPP_PASSWORD_POLICY_COMPLIANCE_ROLLOUT_CONFIG:
+  ENFORCE_COMPLIANCE_ON_LOGIN: false
+
 #-------- Everything below this line is internal to the role ------------
 
 #Use YAML references (& and *) and hash merge <<: to factor out shared settings
@@ -1258,6 +1261,7 @@ generic_env_config:  &edxapp_generic_env
   PASSWORD_MIN_LENGTH: "{{ EDXAPP_PASSWORD_MIN_LENGTH }}"
   PASSWORD_MAX_LENGTH: "{{ EDXAPP_PASSWORD_MAX_LENGTH }}"
   PASSWORD_COMPLEXITY: "{{ EDXAPP_PASSWORD_COMPLEXITY }}"
+  PASSWORD_POLICY_COMPLIANCE_ROLLOUT_CONFIG: "{{ EDXAPP_PASSWORD_POLICY_COMPLIANCE_ROLLOUT_CONFIG }}"
 
 lms_auth_config:
   <<: *edxapp_generic_auth