[Hawkular-dev] Default user, or alternative realm file?

-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 All, Alexandre (and others) asked about the possibility of adding a default user on Keycloak for the Hawkular realm. While adding a default user with the requirement of changing the password on the first login is a possibility, I'd rather have an alternative realm file to import during first boot. This means: a dev (or user) have to actively copy this JSON file into standalone/configuration in order to have a default user. The idea is that we wouldn't ship with a default username/password on the main distribution. Having a default username is usually not recommended from the security perspective, as it's half of the information required to login with super power rights (and you would be surprised to know how many admins set their passwords to "admin"). Given these two alternatives, which one would you prefer? Voting is open and I'll take the results on Monday 9am CET (08:00 UTC). [ ] Default user on the main realm JSON file that will ship with Kettle [ ] Alternate JSON realm file with a default user, which can be copied over the default JSON realm file. - - Juca.