Implement nova get-password in current openstack CLI

[Kev]

nova get-password is very useful for windows servers (when combined with cloud-init) because it is the closest alternative to using keypairs for SSH access.

I.e. cloud-init generates a random administrator password and nova-getpassword uses the private key from the keypair to decrypt it. This seems better than injecting plain text admin passwords via cloud-config in the user-data for the server. It seems to be the most secure option i have seen.

The only documentation i have found is "WONTFIX" here https://github.com/openstack/python-openstackclient/blob/22bed5d1f0594ed297a03a845e08216ff975165d/doc/source/cli/data/nova.csv#L40

Does anyone know why? Or should python-openstackclient implement `openstack server get password`?

[Kev (kcd83)]

The question expired so I'm opening this as a feature request, thanks

[kay (kay-diam)]

As a workaround you can use this tool https://github.com/sapcc/nova-password