Hi Wido, Daan, all
We have just pushed a workaround https://github.com/apache/cloudstack/pull/2155 This works for us. The CsPassword class seems like not needed at all ? The important part for us is that iptables_change = True is set also in case of password handling. That was missing. Daan, we left a TODO for you to look into deeper though. We worked at getting the databag handling fixed inside the class but as we don't have full background, we kept hitting issues. Until we then saw that commenting out the lines which we did actually works as well. I suggest the /2155 is reviewed by the involved stakeholders and based on that we decide ? thanks and toi-toi :-) Kris