Bug 1800644 - RFE add ability to set dashboard password in Cockpit installer
Summary: RFE add ability to set dashboard password in Cockpit installer
Keywords:
Status: CLOSED ERRATA
Alias: None
Product: Red Hat Ceph Storage
Classification: Red Hat Storage
Component: Ceph-Installer
Version: 4.0
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: z1
: 4.1
Assignee: Jeff Brown
QA Contact: Ameena Suhani S H
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2020-02-07 15:44 UTC by John Brier
Modified: 2020-12-08 16:23 UTC (History)
13 users (show)

Fixed In Version: cockpit-ceph-installer-1.1-0.el8cp, cockpit-ceph-installer-1.1-0.el7cp
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2020-07-20 14:20:55 UTC
Embargoed:
jbrier: needinfo-


Attachments (Terms of Use)


Links
System ID Private Priority Status Summary Last Updated
Red Hat Product Errata RHSA-2020:3003 0 None None None 2020-07-20 14:21:11 UTC

Description John Brier 2020-02-07 15:44:25 UTC
Description of problem:

The default `dashboard_admin_password` and `grafana_admin_password` are insecure. You can use dashboard to do write operations, so having it insecure by default is a risk.

We need to offer a way to customize them in the installer. For now we are instructing the customer to do it manually. See step 3. here:

https://access.redhat.com/documentation/en-us/red_hat_ceph_storage/4/html-single/installation_guide/index#deploy-the-ceph-cluster_install

See Bug 1795534 and Bug 1795509 for more information.


Version-Release number of selected component (if applicable):


How reproducible:


Steps to Reproduce:
1.
2.
3.

Actual results:


Expected results:


Additional info:

Comment 6 Paul Cuzner 2020-03-25 03:40:01 UTC
We can add a field to the environment page that can't be blank and enforce some complexity rules on content to align with this.

Comment 8 Paul Cuzner 2020-06-14 21:54:12 UTC
available in 1.1 release

Comment 11 Ameena Suhani S H 2020-06-29 07:34:48 UTC
Verified using 
cockpit-ceph-installer-1.2-0.el7cp.noarch

Comment 13 errata-xmlrpc 2020-07-20 14:20:55 UTC
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

https://access.redhat.com/errata/RHSA-2020:3003


Note You need to log in before you can comment on or make changes to this bug.