Comment 3 for bug 1942709

Revision history for this message
Balazs Gibizer (balazs-gibizer) wrote (last edit ):

I dig through Mitaka and Liberty codepath that is providing password to the metadata service and it looks very similar to what we have on master. The logic was [1] in Liberty too. So I also dig instance.system_metadata usage that supposed to store password in sysmeta. But I found nothing in Liberty / Mitaka that would actually store a password there (except for xen virt driver but you are using libvirt).

I have only found one somewhat related commit [2] in the whole history. But this is actually fixing password storage in metadata if the password is explicitly changes via changePassword server action API call[3].

Honestly I'm stuck. I cannot really create a mitaka devstack any more as it is a so old release. And I cannot find any definite code that changed around this since.

I hope others will have ideas.

[1] https://github.com/openstack/nova/blob/402fe188b4e7ff76109e8a5ea1f24a5e915eaa09/nova/api/metadata/password.py#L37
[2] https://review.opendev.org/c/openstack/nova/+/543032
[3] https://docs.openstack.org/api-ref/compute/#change-administrative-password-changepassword-action