Project

General

Profile

Actions
Copy link

action #162353

closed

Ensure consistent known root password on all OSD webUI+workers size:S

Added by okurz 8 months ago. Updated 4 months ago.

Status:
Resolved
Priority:
Normal
Assignee:
nicksinger
Category:
Feature requests
Target version:
openQA Project (public) - Ready
Start date:
2024-06-17
Due date:
% Done:

0%

Estimated time:
Tags:
infra

Description

Motivation

#162332-7 Again the root password was not known by IT members so I set it explicitly and created https://gitlab.suse.de/openqa/password/-/merge_requests/15 . We should ensure that we use a consistent and known password on all OSD webUI+workers

Acceptance criteria

  • AC1: All places in the documentation (e.g. instructions to install a new system and our password repo) are updated
  • AC2: We use a consistent and known password on all OSD web UI + workers

Suggestions

  • Consider https://gitlab.suse.de/openqa/password/-/merge_requests/15
  • Consider to use salt states deploy the new password (from pillar data only containing the password hash) if you like to get deep into the rabbit hole. Like store the password in openqa/password and in CI pipelines crosscheck that the hash from the pillar repo is consistent (Better don't!!!1)

Related issues 3 (1 open — 2 closed)

Related to openQA Project (public) - coordination #157537: [epic] Secure setup of openQA test machines with secure network+secure authenticationBlockedokurz2024-03-18

Actions
Copied from openQA Infrastructure (public) - action #162332: 2024-06-15 osd not accessible size:MResolvedokurz

Actions
Copied to openQA Infrastructure (public) - action #162356: Treat OSD non-root mounts as non-critical for boot size:MResolvednicksinger

Actions
Actions
Copy link

Also available in: Atom PDF