search

ManageIQ / manageiq-appliance-build

Scripts to build ManageIQ appliances
Apache License 2.0
10 stars 55 forks source link

[WIP] introduce admin user #479

Closed kbrock closed 1 year ago

kbrock commented 3 years ago

The new manageiq user needs access to the v2_key -- so when the key is created, the group is properly set.

This code is not fully tested. I need a little more work until I am able to build appliances on my local box and test the actual implementation of the kickstart, but this is what I typed on the command line.

To be honest, I'm not sure if the proper setup here is to chgrp the v2_key or to chmod 2775 the directory to help others in the future with their v2_key endeavors.

miq-bot commented 3 years ago

Checked commit https://github.com/kbrock/manageiq-appliance-build/commit/1733e1f55b8f19fb9740aa4c9d6961b7021a46d3 with ruby 2.6.3, rubocop 1.13.0, haml-lint 0.35.0, and yamllint 0 files checked, 0 offenses detected Everything looks fine. :cake:

agrare commented 3 years ago

@kbrock will we also need to do this (add user and chgrp) in the rpm build for existing appliances?

kbrock commented 3 years ago

sounds like we should move all of this over to the rpms

miq-bot commented 3 years ago

This pull request is not mergeable. Please rebase and repush.

kbrock commented 3 years ago

the rpm now has the manageiq user. Wondering if we want to transition the appliance to using the manageiq user or another one. I'd actually prefer admin rather than using manageiq but that may be introducing too many special accounts.

Thinking we don't want our service user to be part of the wheel group. But the user that logs into this box needs to be.

chessbyte commented 3 years ago

Wondering if we want to transition the appliance to using the manageiq user or another one. I'd actually prefer admin rather than using manageiq but that may be introducing too many special accounts.

Maybe manageiq-admin?

kbrock commented 3 years ago

I like admin

The user will sudo as root (or user manageiq) to do most of their configuration

Thinking of just closing this for now.

miq-bot commented 1 year ago

This pull request has been automatically closed because it has not been updated for at least 3 months.

Feel free to reopen this pull request if these changes are still valid.

Thank you for all your contributions! More information about the ManageIQ triage process can be found in the triage process documentation.