tuskar overcloud-list shows passwords

[James Slagle]

tuskar overcloud-list will show your passwords that you used when you launched the overcloud. tuskar should honor the NoEcho attribute in the templates, the same way as Heat does.

[Ladislav Smola (lsmola)]

I have reported same thing weeks ago. The solution here will be to migrate to barbican.

[Ladislav Smola (lsmola)]

If there is a quick fix please try, but we are using at least Admin Password for connection to Overcloud, so we need it to be accessible. Which relates to this https://bugs.launchpad.net/tuskar/+bug/1235236

The long thread about this is here
http://lists.openstack.org/pipermail/openstack-dev/2014-February/027582.html
in the case that anybody wants to start another long discussion

[OpenStack Infra (hudson-openstack)]

Reviewed: https://review.openstack.org/94648
Committed: https://git.openstack.org/cgit/openstack/tuskar/commit/?id=ca24351c637b5ceff0a48973cdb77d9560a5df34
Submitter: Jenkins
Branch: master

commit ca24351c637b5ceff0a48973cdb77d9560a5df34
Author: Roman Podoliaka <email address hidden>
Date: Wed May 21 18:04:14 2014 +0300

    Don't display passwords when listing overclouds

    A quick and dirty workaround to stop displaying passwords when
    listing overclouds. The proper way to fix this would probably be
    either to stop storing passwords in Tuskar API or delegate this task
    to another service.

    Change-Id: Ibb269e82f24a0cd4a77594ea9374359a0503b636
    Closes-Bug: #1308172