[Openstack] [Heat] admin_user property implementation

Michaël Van de Borne michael.vandeborne at cetic.be
Mon Mar 24 16:00:59 UTC 2014


Hi there,

1. When an instance is booted from a Heat stack, the user for whom the 
ssh public key is injected is, by default, 'ec2-user'. Even if there is 
a cloud-wide setting (instance_user in /etc/heat/heat.conf) that allows 
to change this, it isn't a good solution, as all stack deployments will 
then use that specific value (although various cloud images may require 
various users). I would expect here that Heat runs its operations *on 
behalf of the default user defined in the cloud-init configuration of 
the instance*. I would be glad if there was a way to configure Heat that 
way. Any idea??

2. However, it seems there'd be a workaround using the "admin_user" 
property in the HOT file (documented here: 
http://docs.openstack.org/developer/heat/template_guide/openstack.html#OS::Nova::Server-props). 
Unfortunately, this parameter is not recognized by heat-api. Here's the 
error:

2014-03-24 16:32:23.940 1128 DEBUG root [-] JSON response : 
{"explanation": "Unknown Property admin_user", "code": 400, "error": 
{"message": "Unknown Property admin_user", "traceback": "  File 
\"/usr/lib/python2.7/dist-packages/heat/common/wsgi.py\", line 661, in 
__call__\n    request, **action_args)\n  File 
\"/usr/lib/python2.7/dist-packages/heat/common/wsgi.py\", line 729, in 
dispatch\n    return method(*args, **kwargs)\n  File 
\"/usr/lib/python2.7/dist-packages/heat/api/openstack/v1/util.py\", line 
31, in handle_stack_method\n    return handler(controller, req, 
**kwargs)\n  File 
\"/usr/lib/python2.7/dist-packages/heat/api/openstack/v1/stacks.py\", 
line 317, in validate_template\n    raise 
exc.HTTPBadRequest(result['Error'])\n", "type": "HTTPBadRequest"}, 
"title": "Bad Request"} to_json 
/usr/lib/python2.7/dist-packages/heat/common/wsgi.py:562


I'm running OpenStack Havana on Ubuntu 12.04.

root at penny:/var/log/heat# dpkg -l heat-api
||/ Name Version                                               Description
+++-=====================================================-=======================
ii  heat-api 2013.2.2-0ubuntu1~cloud0                              
OpenStack orchestration service - ReST API



any help appreciated. thank you.
cheers,

m.

-- 
Michaël Van de Borne
R&D Engineer, SOA team, CETIC
Phone: +32 (0)71 49 07 45 Mobile: +32 (0)472 69 57 16, Skype: mikemowgli
www.cetic.be, rue des Frères Wright, 29/3, B-6041 Charleroi

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.openstack.org/pipermail/openstack/attachments/20140324/5c415dfe/attachment.html>


More information about the Openstack mailing list