From 1e50df94191f3416b3e7a5f03f19625b1233b4de Mon Sep 17 00:00:00 2001
From: Lukas Bezdicka <lbezdick@redhat.com>
Date: Wed, 02 Aug 2023 12:31:01 +0200
Subject: [PATCH] [ffwd2] Set service_user for nova on hybrid state

During hybrid state we need to setup service user for nova compute
or else it will not be able to talk to cinder.

Resolves: rhbz#2228414

Change-Id: I5522caf4f84b67183c70a8b36a04c731ca25c9a4
---

diff --git a/deployment/nova/nova-compute-container-puppet.yaml b/deployment/nova/nova-compute-container-puppet.yaml
index 893fbac..55feb37 100644
--- a/deployment/nova/nova-compute-container-puppet.yaml
+++ b/deployment/nova/nova-compute-container-puppet.yaml
@@ -1311,6 +1311,60 @@
                     path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
                     section: api_database
                     state: absent
+                - name: Set nova service_user send_service_user_token
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: send_service_user_token
+                    value: true
+                - name: Set nova service_user project_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: project_name
+                    value: service
+                - name: Set nova service_user password
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: password
+                    value: {get_param: NovaPassword}
+                - name: Set nova service_user auth_url
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: auth_url
+                    value: {get_param: [EndpointMap, KeystoneInternal, uri_no_suffix]}
+                - name: Set nova service_user region_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: region_name
+                    value: {get_param: KeystoneRegion}
+                - name: Set nova service_user username
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: username
+                    value: nova
+                - name: Set nova service_user auth_type
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: auth_type
+                    value: password
+                - name: Set nova service_user project_domain_name
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: project_domain_name
+                    value: Default
+                - name: Set nova service_user auth_type
+                  ini_file:
+                    path: /var/lib/config-data/puppet-generated/nova_libvirt/etc/nova/nova.conf
+                    section: service_user
+                    option: user_domain_name
+                    value: Default
                 # We have to update check-run-nova-compute as it's distributed via THT and not rpm or image so at this
                 # moment we have Queens code instead of Train which will not work due to switch from python2 to python3
                 - name: is Instance HA enabled