yahoo-eng-team team mailing list archive

[Boris Lukashev <1949674@xxxxxxxxxxxxxxxxxx>]

Public bug reported:

Using current KA (12.2.0), deploying Wallaby, i'm seeing Nova not set instance passwords unless its done via user_data directives. The default password in our Windows images is never changed, even if explicitly told to during instance creation. Same thing for Linux & BSD, regardless of whether the username is set in the image metadata properties or not.
I've reported the same issue to the Juju tracker (was using their stack until snaps killed a cloud), no answer from them yet.
This _may_ be considered a security issue as it removes the function of wiping static default credentials pre-baked into images (https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password).

This was previously filed as https://bugs.launchpad.net/bugs/1942654
under kolla-ansible

** Affects: nova
     Importance: Undecided
         Status: New

-- 
You received this bug notification because you are a member of Yahoo!
Engineering Team, which is subscribed to OpenStack Compute (nova).
https://bugs.launchpad.net/bugs/1949674

Title:
  Nova Doesn't Set Instance Passwords

Status in OpenStack Compute (nova):
  New

Bug description:
  Using current KA (12.2.0), deploying Wallaby, i'm seeing Nova not set instance passwords unless its done via user_data directives. The default password in our Windows images is never changed, even if explicitly told to during instance creation. Same thing for Linux & BSD, regardless of whether the username is set in the image metadata properties or not.
  I've reported the same issue to the Juju tracker (was using their stack until snaps killed a cloud), no answer from them yet.
  This _may_ be considered a security issue as it removes the function of wiping static default credentials pre-baked into images (https://owasp.org/www-community/vulnerabilities/Use_of_hard-coded_password).

  This was previously filed as https://bugs.launchpad.net/bugs/1942654
  under kolla-ansible

To manage notifications about this bug go to:
https://bugs.launchpad.net/nova/+bug/1949674/+subscriptions