Comment 9 for bug 1664521

From the UI's perspective there are workarounds to manually configure the values.

For Ocata: after enabling the "Externally managed Ceph" storage environment, click on the "Parameters" tab (same "Deployment Configuration" window), select "Externally managed Ceph" in the left-side menu and change the value for CephClientKey and other parameters as needed.

For Newton: after enabling the "Externally managed Ceph" storage environment, return to the main Deployment page, click on the pencil for the Controller card and navigate to the Services Tab. The CephClientKey and other settings are located under OS::TripleO::Services::CephExternal.

I'm not sure yet about the real fix to make sure the correct values are surfaced and override the default passwords correctly for UI deploys. I suspect bug 1635409 and other similar bugs around aligning the CLI and UI templates processing will help, but it's uncertain whether the relevant parts of that work will be backportable. I'm removing these tags for now based on this.