From 46bfbb0a5d314cca0ceacd3f8885d94cab733087 Mon Sep 17 00:00:00 2001 From: Daniel-Pivonka Date: Thu, 30 Jan 2020 10:21:31 -0500 Subject: [PATCH] cephadm: flag dashboard user to change password As the generated password is printed to stdout, users should change their password. Should be possible to disable this behavior, as it is inconvenient for developers. Fixes: tracker.ceph.com/issues/43694 Signed-off-by: Daniel-Pivonka --- src/cephadm/cephadm | 12 ++++++++---- 1 file changed, 8 insertions(+), 4 deletions(-) diff --git a/src/cephadm/cephadm b/src/cephadm/cephadm index cb1d9d4f1fc..22d2691eedf 100755 --- a/src/cephadm/cephadm +++ b/src/cephadm/cephadm @@ -2005,10 +2005,10 @@ def command_bootstrap(): logger.info('Creating initial admin user...') password = args.initial_dashboard_password or generate_password() - cli(['dashboard', 'ac-user-create', - args.initial_dashboard_user, password, - 'administrator', - '--force-password']) + cmd = ['dashboard', 'ac-user-create', args.initial_dashboard_user, password, 'administrator', '--force-password'] + if not args.dashboard_password_noupdate: + cmd.append('--pwd-update-required') + cli(cmd) logger.info('Fetching dashboard port number...') out = cli(['config', 'get', 'mgr', 'mgr/dashboard/ssl_server_port']) port = int(out) @@ -3395,6 +3395,10 @@ def _get_parser(): '--skip-dashboard', action='store_true', help='do not enable the Ceph Dashboard') + parser_bootstrap.add_argument( + '--dashboard-password-noupdate', + action='store_true', + help='stop forced dashboard password change') parser_bootstrap.add_argument( '--no-minimize-config', action='store_true', -- 2.47.3