Please, test and document access to deployment image via the included element "dynamic-login". Upstream documentation here: https://docs.openstack.org/developer/ironic-python-agent/troubleshooting.html#id8 This would ideally be added to the troubleshooting section. This is for both, director and Ironic in the Overcloud. The "dynamic-login" DIB element is included in the official deployment image in TripleO/director: https://github.com/openstack/python-tripleoclient/blob/master/tripleoclient/v1/overcloud_image.py
Additional information about having to disable selinux: https://bugzilla.redhat.com/show_bug.cgi?id=1255356#c30
Updated link to upstream docs: https://docs.openstack.org/ironic-python-agent/latest/admin/troubleshooting.html
This is generally known/documented in the community and various blog examples.
The needinfo request[s] on this closed bug have been removed as they have been unresolved for 500 days