Re: [Hawkular-dev] Default user, or alternative realm file?

On 11 Mar 2015, at 18:29, Alexandre Mendonca wrote: > The alternative of a file to be copied over would be used mostly > for development, where after building we would copy it over so that > after each rebuild it's not needed to go through the registrations > process. Can we make sure that docker images get a sensible default that does not requiring ssh-ing into the container and manually copying things around?

It is best to avoid setting default passwords. Many people will extend the image and forget to remove or change the default password. This can lead to security issues if a user in production is assigned a well-known password. Passwords should be configurable using an environment variable instead. See the Using Environment Variables for Configuration topic for more information.

_______________________________________________ hawkular-dev mailing list hawkular-dev(a)lists.jboss.org https://lists.jboss.org/mailman/listinfo/hawkular-dev