gdeploy icon indicating copy to clipboard operation
gdeploy copied to clipboard

set-pcs-auth-passwd password generation should be deprecated in favour of gdeploy config file

Open arrrgi opened this issue 7 years ago • 0 comments

Hi, I noted as I was poring through the playbooks that a generic clear text password is created in the set-pcs-auth-passwd.yml via shell command.

This might be better improved by moving this variable up into the configuration file read in by gdeploy as some target environments/users would prefer to use something a little more secure at the onset.

Side note - can we also avoid using "root" for the playbooks? Ansible now supports becoming a user with elevated privileges http://docs.ansible.com/ansible/become.html

arrrgi avatar Oct 13 '16 10:10 arrrgi