[Hawkular-dev] Default user, or alternative realm file?

[Peter Palaga]

Hi *, inline...

On 03/12/2015 06:08 PM, Heiko W.Rupp wrote:
> On 11 Mar 2015, at 18:29, Alexandre Mendonca wrote:
>
>> The alternative of a file to be copied over would be used mostly
>> for development, where after building we would copy it over so that
>> after each rebuild it's not needed to go through the registrations
>> process.
>
> Can we make sure that docker images get a sensible default that does
> not requiring ssh-ing into the container and manually copying things
> around?

Cite from OpenShift docs, Best Practices for writing images:

> It is best to avoid setting default passwords. Many people will
> extend the image and forget to remove or change the default password.
> This can lead to security issues if a user in production is assigned
> a well-known password. Passwords should be configurable using an
> environment variable instead. See the Using Environment Variables for
> Configuration topic for more information.

http://docs.openshift.org/latest/image_writers_guide/guidelines.html
-- P




> _______________________________________________ hawkular-dev mailing
> list hawkular-dev at lists.jboss.org
> https://lists.jboss.org/mailman/listinfo/hawkular-dev
>