mastodon icon indicating copy to clipboard operation
mastodon copied to clipboard

helm: Keep create admin job to retrieve initial password

Open mohe2015 opened this issue 3 years ago • 3 comments

This may be a security issue so needs to be thought about thoroughly. It makes initial setup way easier in my opinion though and you can also immediately reset your password afterwards in the web interface.

mohe2015 avatar Nov 04 '22 14:11 mohe2015

I wonder if the job is too fast to be picked up by things that scrape the stdout from pods

deepy avatar Nov 05 '22 13:11 deepy

I wonder if the job is too fast to be picked up by things that scrape the stdout from pods

I would assume these tools would be able to deal with that but to my knowledge with vanilla kubectl it's only possible to retrieve this from jobs that aren't deleted yet. Also I didn't see any documentation on how to run tootctl easily (I know I could adjust this service to create an interactive container with that) so this was a thing to make mastodon easier to install for me. But maybe we could also just add such an interactive container to optionally enable in the helm chart like e.g. rook does.

mohe2015 avatar Nov 05 '22 16:11 mohe2015

kubectl exec -it deployment/mastodon-web -- sh gets you a shell running in one of the mastodon-web pods, tootctl is available. You could also swap out sh for tootctl directly

deepy avatar Nov 05 '22 17:11 deepy

Then I would close this and instead improve the documentation.

mohe2015 avatar Nov 05 '22 18:11 mohe2015

See https://github.com/mastodon/mastodon/pull/19791

mohe2015 avatar Nov 05 '22 18:11 mohe2015