Bug 1240833

Summary: overcloud heat instance_user is set to heat-admin
Product: Red Hat OpenStack Reporter: Mike Burns <mburns>
Component: openstack-puppet-modulesAssignee: Ivan Chavero <ichavero>
Status: CLOSED ERRATA QA Contact: Amit Ugol <augol>
Severity: unspecified Docs Contact:
Priority: high    
Version: 7.0 (Kilo)CC: augol, emacchi, jschluet, lbezdick, mburns, rhel-osp-director-maint, rrosa, sbaker, sclewis, yeylon, zbitter
Target Milestone: gaKeywords: Triaged
Target Release: 7.0 (Kilo)   
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: openstack-puppet-modules-2015.1.8-5.el7ost Doc Type: Bug Fix
Doc Text:
Story Points: ---
Clone Of: 1240449 Environment:
Last Closed: 2015-08-05 13:29:06 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1240449    

Description Mike Burns 2015-07-07 21:22:48 UTC 
+++ This bug was initially created as a clone of Bug #1240449 +++

In the overcloud heat, heat.conf instance_user is set to heat-admin.

The consequence of this is that SSHing into heat created guest VMs will require the user 'heat-admin'. I predict that this will result in user confusion as to how to SSH into their VMs since they will be attempting default usernames (centos, cloud-user etc) or the documented heat default user (ec2-user)

Upstream, instance_user is deprecated and will be removed in Liberty, meaning image default usernames would be used to SSH into VMs (centos, cloud-user etc).

Overcloud heat should have instance_user set to <empty> now so that default usernames are used. Since heat-admin will cause user confusion, and upstream behaviour will change, I'd like this to be considered a blocker for GA.

Having instance_user set to heat-admin on the undercloud heat *is* appropriate, since we document how operators should ssh into their overcloud nodes.


--- Additional comment from Steve Baker on 2015-07-06 23:29:24 EDT ---

Upstream puppet-heat patch: https://review.openstack.org/#/c/197147
Upstream tripleo-heat-templates patch: https://review.openstack.org/#/c/198947/
Comment 2 Ivan Chavero 2015-07-08 00:16:08 UTC 
Upstream patch looks good
Comment 3 Ivan Chavero 2015-07-09 08:16:31 UTC 
can i have pm_ack please
Comment 8 Amit Ugol 2015-07-21 15:11:25 UTC 
Value is empty now.
Comment 10 errata-xmlrpc 2015-08-05 13:29:06 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1548