can't update openstack database passwords

[Juan Antonio Osorio Robles]

It is currently not possible to change the database passwords for the openstack service users. Trying will give authentication errors on mysql.

This is because the container that runs the user provisioning only gets ran once on an intial deployment, and doesn't get run if there's an update in the passwords because that doesn't change the configuration.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: master
Review: https://review.openstack.org/560387

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/560387
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=6c40b1586ab1269e124f0f71d094834137819375
Submitter: Zuul
Branch: master

commit 6c40b1586ab1269e124f0f71d094834137819375
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Apr 11 10:36:55 2018 +0000

    Always run mysql init bundle

    This init container runs docker-puppet manually and is responsible of
    provisioning the mysql users and passwords. This currently doesn't get
    ran every time since the configuration stays the same, even if the users
    or passwords change (which are gotten from hieradata). Allowing this to
    run every time will allow us to change database passwords

    Closes-Bug: #1762991
    Change-Id: I1f07272499b419079466cf9f395fb04a082099bd

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 9.0.0.0b2 development milestone.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/queens
Review: https://review.openstack.org/567816

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/567816
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=22b39f5b3759a919335bfaf49170b41e2ec0229d
Submitter: Zuul
Branch: stable/queens

commit 22b39f5b3759a919335bfaf49170b41e2ec0229d
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Apr 11 10:36:55 2018 +0000

    Always run mysql init bundle

    This init container runs docker-puppet manually and is responsible of
    provisioning the mysql users and passwords. This currently doesn't get
    ran every time since the configuration stays the same, even if the users
    or passwords change (which are gotten from hieradata). Allowing this to
    run every time will allow us to change database passwords

    Closes-Bug: #1762991
    Change-Id: I1f07272499b419079466cf9f395fb04a082099bd
    (cherry picked from commit 6c40b1586ab1269e124f0f71d094834137819375)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 8.0.3 release.

[OpenStack Infra (hudson-openstack)]

Fix proposed to branch: stable/pike
Review: https://review.openstack.org/578229

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/578229
Committed: https://git.openstack.org/cgit/openstack/tripleo-heat-templates/commit/?id=7ef39e77c28704d8e1a06a3a514f27fddc2f327a
Submitter: Zuul
Branch: stable/pike

commit 7ef39e77c28704d8e1a06a3a514f27fddc2f327a
Author: Juan Antonio Osorio Robles <email address hidden>
Date: Wed Apr 11 10:36:55 2018 +0000

    Always run mysql init bundle

    This init container runs docker-puppet manually and is responsible of
    provisioning the mysql users and passwords. This currently doesn't get
    ran every time since the configuration stays the same, even if the users
    or passwords change (which are gotten from hieradata). Allowing this to
    run every time will allow us to change database passwords

    Closes-Bug: #1762991
    Change-Id: I1f07272499b419079466cf9f395fb04a082099bd
    (cherry picked from commit 6c40b1586ab1269e124f0f71d094834137819375)

[OpenStack Infra (hudson-openstack)]

This issue was fixed in the openstack/tripleo-heat-templates 7.0.14 release.