Bug 1240833 - overcloud heat instance_user is set to heat-admin
Summary: overcloud heat instance_user is set to heat-admin
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat OpenStack
Classification: Red Hat
Component: openstack-puppet-modules
Version: 7.0 (Kilo)
Hardware: Unspecified
OS: Unspecified
high
unspecified
Target Milestone: ga
: 7.0 (Kilo)
Assignee: Ivan Chavero
QA Contact: Amit Ugol
URL:
Whiteboard:
Depends On:
Blocks: 1240449
TreeView+ depends on / blocked
 
Reported: 2015-07-07 21:22 UTC by Mike Burns
Modified: 2023-02-22 23:02 UTC (History)
11 users (show)

Fixed In Version: openstack-puppet-modules-2015.1.8-5.el7ost
Doc Type: Bug Fix
Doc Text:
Clone Of: 1240449
Environment:
Last Closed: 2015-08-05 13:29:06 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
OpenStack gerrit 197147 0 None None None Never
Red Hat Product Errata RHEA-2015:1548 0 normal SHIPPED_LIVE Red Hat Enterprise Linux OpenStack Platform Enhancement Advisory 2015-08-05 17:07:06 UTC

Description Mike Burns 2015-07-07 21:22:48 UTC
+++ This bug was initially created as a clone of Bug #1240449 +++

In the overcloud heat, heat.conf instance_user is set to heat-admin.

The consequence of this is that SSHing into heat created guest VMs will require the user 'heat-admin'. I predict that this will result in user confusion as to how to SSH into their VMs since they will be attempting default usernames (centos, cloud-user etc) or the documented heat default user (ec2-user)

Upstream, instance_user is deprecated and will be removed in Liberty, meaning image default usernames would be used to SSH into VMs (centos, cloud-user etc).

Overcloud heat should have instance_user set to <empty> now so that default usernames are used. Since heat-admin will cause user confusion, and upstream behaviour will change, I'd like this to be considered a blocker for GA.

Having instance_user set to heat-admin on the undercloud heat *is* appropriate, since we document how operators should ssh into their overcloud nodes.


--- Additional comment from Steve Baker on 2015-07-06 23:29:24 EDT ---

Upstream puppet-heat patch: https://review.openstack.org/#/c/197147
Upstream tripleo-heat-templates patch: https://review.openstack.org/#/c/198947/

Comment 2 Ivan Chavero 2015-07-08 00:16:08 UTC
Upstream patch looks good

Comment 3 Ivan Chavero 2015-07-09 08:16:31 UTC
can i have pm_ack please

Comment 8 Amit Ugol 2015-07-21 15:11:25 UTC
Value is empty now.

Comment 10 errata-xmlrpc 2015-08-05 13:29:06 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHEA-2015:1548


Note You need to log in before you can comment on or make changes to this bug.