How to access the password for VMware Integrated OpenStack components

Products

• VMware
• VMware Integrated OpenStack

Issue/Introduction

This article contains steps to access password for VIO components.

Environment

VMware Integrated OpenStack 3.0.x
VMware Integrated OpenStack 2.0.x

Resolution

Ansible vault is used to store the credentials for the services mentioned in this table:

Services	Description
ceilometer_admin	Ceilometer's Keystone user password
ceilometer_mongodb_password	Ceilometer's MongoDB user password
cinder_admin	Cinder's Keystone user password
cinder_db	Cinder's MySQL user password
glance_admin	Glance's Keystone user password
glance_db	Glance's MySQL user password
heat_admin	Heat's Keystone user password
heat_db	Heat's MySQL user password
keystone_db	Keystone's MySQL user password
ldap_password	Openstack's LDAP user password
mongodb_admin_password	MongoDB's admin password
neutron_admin	Neutron's Keystone user password
neutron_db	Neutron's MySQL user password
nova_admin	Nova's Keystone user password
nova_db	Nova's MySQL user password
nsxv_password	Openstack's NSX user password
rabbit	RabbitMQ's admin password
sqldebmaint	MySQL's debian-sys-maint user password
sqlroot	MySQL's root password
vcenter_password	Openstack's vCenter user password

To access ansible vault:

1. Using SSH, log in to the OpenStack Management Server(OMS) as viouser.
2. Run this command to get the deployment UUID:
   
   sudo viocli show -p
   
   For example:
   
   viouser@vio-oms:~$ sudo viocli show -p
   
   You see output similar to:
   
   [sudo] password for viouser:
   /var/lib/vio/jarvis/7ba325f9-0875-4dec-986a-438e1be99ac2/site-req-60ad814c-c02f-4c7c-b883-edf4546981e4-hosts.ini
   
   Where, 7ba325f9-0875-4dec-986a-438e1be99ac2 is the deployment UUID.
   
   Note: The deployment UUID appears as /var/lib/vio/jarvis/Deployment-UUID/Site-request
   
   
3. Run this command by entering the deployment UUID received in step 2.
   
   sudo ansible-vault view /var/lib/vio/jarvis/Deployment-UUID/credentials/service
   
   For example:
   
   sudo ansible-vault view /var/lib/vio/jarvis/7ba325f9-0875-4dec-986a-438e1be99ac2/credentials/sqlroot
   
   The password is decrypted and passed to memory for viewing.

You can access OpenStack management virtual machines by SSH or use direct console.

Using SSH:

1. Log in to the OpenStack Management Server(OMS) as viouser using SSH.
2. From the OMS, log in to the required component using SSH.
   
   For example:
   
   viouser@vio-oms:~$ ssh controller01
   
3. Run this command to see the list of components in OMS.
   
   cat /etc/hosts
   
   Note: List of components that can be connected to is also found in the hosts file.

Using console:

1. Open console to the desired OpenStack management virtual machine from the vSphere Web Client.
2. Log in as root user and type the password as vmware.

Additional Information

VIO Launching an instance fails with Error: Timed out waiting for a reply to message ID