Add support for 'Retrieve Password' via Horizon UI

In local_settings.py.erb this value was hardcoded to false.
This change enables the setting of this value as referenced in
https://review.openstack.org/#/c/61032/

Change-Id: Ica6932cf97fd6f2dc00f17d523e28215401a297f
Closes-Bug: 1639851

manifests/init.pp

@@ -281,6 +281,10 @@
 #   Valid values are 'legacy' and 'angular'
 #   Defaults to 'legacy'
 #
+#  [*password_retrieve*]
+#    (optional) Enables the use of 'Retrieve Password' in the Horizon Web UI.
+#    Defaults to false
+#
 # === DEPRECATED group/name
 #
 #  [*fqdn*]
@@ -376,6 +380,7 @@ class horizon(
   $default_theme                       = false,
   $password_autocomplete               = 'off',
   $images_panel                        = 'legacy',
+  $password_retrieve                   = false,
   # DEPRECATED PARAMETERS
   $custom_theme_path                   = undef,
   $fqdn                                = undef,

releasenotes/notes/enable-password-retrieve-b0bfa91053b24186.yaml

@@ -0,0 +1,4 @@
+---
+features:
+  - Making OPENSTACK_ENABLE_PASSWORD_RETRIEVE in local_settings.py a configurable value
+    This allows users to retrieve the instance autogenerated password via Horizon

spec/classes/horizon_init_spec.rb

@@ -127,6 +127,7 @@ describe 'horizon' do
           :default_theme                => 'default',
           :password_autocomplete        => 'on',
           :images_panel                 => 'angular',
+          :password_retrieve            => true,
         })
       end
 
@@ -171,6 +172,7 @@ describe 'horizon' do
           "    'profile_support': 'cisco',",
           "    'supported_provider_types': ['flat', 'vxlan'],",
           "    'supported_vnic_types': ['*'],",
+          'OPENSTACK_ENABLE_PASSWORD_RETRIEVE = True',
           'OPENSTACK_ENDPOINT_TYPE = "internalURL"',
           'SECONDARY_ENDPOINT_TYPE = "ANY-VALUE"',
           'API_RESULT_LIMIT = 4682',

templates/local_settings.py.erb

@@ -291,6 +291,9 @@ OPENSTACK_KEYSTONE_BACKEND = {
 # Setting this to True, will add a new "Retrieve Password" action on instance,
 # allowing Admin session password retrieval/decryption.
 #OPENSTACK_ENABLE_PASSWORD_RETRIEVE = False
+<% if @password_retrieve -%>
+OPENSTACK_ENABLE_PASSWORD_RETRIEVE = True
+<% end -%>
 
 # The Launch Instance user experience has been significantly enhanced.
 # You can choose whether to enable the new launch instance experience,