-
Epic
-
Resolution: Done
-
Major
-
None
-
None
-
User password in hosted Image Builder
-
20
-
0% To Do, 0% In Progress, 100% Done
-
True
Goal:
- Allow passing user password when creating blueprint to allow creating users with sudo
- Note: Passwordless sudo is not an option due to security (we are actually aiming at building more secure images, this would undermine the effort)
- Password needs to be encoded and salted before saving
- Password can never leave the database through API read - we need to filter it out.
Acceptance Criteria:
- Verify user and passwords can be set to create for blueprints in hosted image builderĀ
- Verify its not possible to retrieve the password through API
Open questions:
- How to filter out the password from API reads?
- How to encrypt and salt the passwords?
Additional info
- Composer already supports passing password, so we assume there will be no change in composer necessary.
- Composer is crypting the password when passed to it in plain text, but allows passing already crypted password
- is related to
-
HMS-4181 Expose user customization in the Insights Image Builder front-end
- In Progress