Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

litmus Helm - Allow to disable password reset on first login for admin account if existingSecret is being used #4787

Open
gustavoromerobenitez opened this issue Jul 24, 2024 · 2 comments

Comments

@gustavoromerobenitez
Copy link

gustavoromerobenitez commented Jul 24, 2024

When litmus is deployed via the homonymous Helm chart, it is likely that the admin secret is pre-configured, for example via External Secrets.

The feature introduced by this PR makes password reset mandatory for the admin account, which means the external secret must be updated after its first login.

In an ideal situation, when the Helm chart variable existingSecret is set, the admin account should not be asked to reset its password. Other use cases would be non-production environments like sandboxing or test environments where security is not a concern.

Please allow making the aforementioned functionality optional, but defaulting to Enabled.
Thanks in advance.

@celinegrn
Copy link

Hello @gustavoromerobenitez, I have the same problem because I want to preconfigure the admin password via gitops. Have you found a workaround?

@gustavoromerobenitez
Copy link
Author

Hello @gustavoromerobenitez, I have the same problem because I want to preconfigure the admin password via Gitops. Have you found a workaround?

The only workaround I found was updating the source of the external secret (i.e: gcp secret manager secret) after resetting it via the UI. Seed the initial secret with a dummy value and then set the permanent one after resetting it via the ui. Another alternative is to use a version of Litmus Chaos that predates the PR mentioned above.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

2 participants