Comment 2 for bug 1611704

Actually, defining custom passwords doesn't work at all, e.g if you create a password file like:

[stack@instack ~]$ cat tripleo-overcloud-passwords.yaml
parameter_defaults:
  NeutronMetadataProxySharedSecret: apassword
  GlancePassword: apassword
  NovaPassword: apassword
  GnocchiPassword: apassword
  IronicPassword: apassword
  HeatPassword: apassword
  RabbitmqPassword: apassword
  RedisPassword: apassword
  TrovePassword: apassword
  CinderPassword: apassword
  SwiftPassword: apassword
  AdminToken: apassword
  SwiftHash: apassword
  HaproxyStatsPassword: apassword
  SaharaPassword: apassword
  ManilaPassword: apassword
  CeilometerSecret: apassword
  MistralPassword: apassword
  AodhPassword: apassword
  ZaqarPassword: apassword
  NeutronPassword: apassword
  DemoPassword: apassword
  CeilometerPassword: apassword
  AdminPassword: apassword
  MysqlClustercheckPassword: apassword
  HeatStackDomainPassword: apassword

Then deploy like:

openstack overcloud deploy --templates -e tripleo-overcloud-passwords.yaml

The stack create works, but we write out the random passwords to tripleo-overcloud-passwords, which means the call to os-cloud-config fails:

2016-08-10 10:25:02 [overcloud]: CREATE_COMPLETE Stack CREATE completed successfully
Stack overcloud CREATE_COMPLETE
/home/stack/.ssh/known_hosts updated.
Original contents retained as /home/stack/.ssh/known_hosts.old
The request you have made requires authentication. (HTTP 401) (Request-ID: req-67d6570d-147d-468d-91

[root@overcloud-controller-0 ~]# cat /etc/heat/heat.conf | grep apassword
connection = mysql+pymysql://heat:apassword@192.0.2.15/heat
password = apassword
password=apassword

So we need to fix this as a first step.