Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1080990

Summary: [RFE] Hosted-engine: add a plugin to create an engine account to use in the agent
Product: [oVirt] ovirt-hosted-engine-setup Reporter: Jiri Moskovcak <jmoskovc>
Component: RFEsAssignee: Sandro Bonazzola <sbonazzo>
Status: CLOSED WONTFIX QA Contact: Nikolai Sednev <nsednev>
Severity: low Docs Contact:
Priority: medium    
Version: ---CC: bugs, dfediuck, rbalakri, srevivo, ylavi
Target Milestone: ---Keywords: FutureFeature
Target Release: ---Flags: ylavi: ovirt-future?
ylavi: planning_ack?
ylavi: devel_ack?
ylavi: testing_ack?
Hardware: Unspecified   
OS: Unspecified   
Whiteboard:
Fixed In Version: Doc Type: Enhancement
Doc Text:
Feature: create an engine account to use in the agent Reason: Result (if any):
 Story Points: ---
Clone Of: Environment:
Last Closed: 2018-06-06 12:19:44 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: Integration RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Embargoed:
Bug Depends On:    
Bug Blocks: 1037641    

Description Jiri Moskovcak 2014-03-26 12:54:23 UTC 
Description of problem:
According to the 1037641 agent should use the engine rather than vdsm and to access the engine api the agent needs an account and a certificate.

Actual results:
the agent can use the admin account, but that's not wise, as the default admin account can be blocked and removed and has unlimited access to the engine which gives the agent the possibility to break something over the api

Expected results:
account with a limited access to the engine is created during the hosted engine setup
Comment 1 Sandro Bonazzola 2014-10-28 12:21:16 UTC 
For this to happen we need another user in the engine. I think there should be an RFE for allowing new user creation, need to add it as dependency.
Comment 3 Yaniv Lavi 2018-06-06 12:19:44 UTC 
Closing old RFEs. Please reopen if needed.
Patches are welcome.