No way to set murano service user with hiera

[SFilatov]

Currently murano manifest is not getting service user from hiera, so there's no way to customize it.
Also for murano and heat murano service name = service user, which is different from other services. It's complicating writing plugins and I suggest we have the same behavior for all the services. I'm using fuel 9.0

[Kirill Zaitsev (kzaitsev)]

From the description of the bug it looks like the problem is not in murano itself, but rather in the way fuel installs murano. Murano team is not directly involved in writing manifests, or configuring hiere, therefore I believe it's not correct to assign this bug to MOS Murano.

[Dmitry Burmistrov (dmburmistrov)]

Correct me if I'm wrong - are we talking about this manifest https://github.com/openstack/fuel-library/blob/stable/mitaka/deployment/puppet/openstack_tasks/manifests/murano/keystone.pp and nearby?

Maybe we can fix the scope of this bug? We (puppet team) can take a look on these manifests on monday/tuesday and suggest something as a start. And you can correct us if we miss something.

[SFilatov (sergeyfilatov)]

Yes. Here's the list:

https://github.com/openstack/fuel-library/blob/stable/mitaka/deployment/puppet/openstack_tasks/manifests/murano/keystone.pp
  - auth_name
  - service_name

https://github.com/openstack/fuel-library/blob/stable/mitaka/deployment/puppet/openstack_tasks/manifests/heat/heat.pp
  - auth_name for domain user
  - manage domain(in case we don't need to)

https://github.com/openstack/fuel-library/blob/stable/mitaka/deployment/puppet/openstack_tasks/manifests/heat/keystone.pp
  - service_name

https://github.com/openstack/fuel-library/blob/stable/mitaka/deployment/puppet/openstack_tasks/manifests/heat/keystone.pp
  - service_name for s3

issues are:
  - for services: openstack can't work with multiple services for one's type
  - for users: we need to be able to configure different service users with detached keystone setup

[Denis Egorenko (degorenko)]

Actually, you can override it via hiera with:

"murano::keystone::auth::auth_name": <whatever>

during execution your plugin hiera task.

[Denis Meltsaykin (dmeltsaykin)]

Setting as Invalid after a month in Incomplete without feedback.