search

cloudera-labs / cloudera.cluster

An Ansible collection for lifecycle and management of Cloudera CDP Private Cloud resources on bare metal, IaaS, and PaaS.
Apache License 2.0
32 stars 46 forks source link

Autols Hardcoded User #212

Open hadoopch opened 3 months ago

hadoopch commented 3 months ago

Hi,

the autotls role provides two possibilities to configure it:

1) using user/password 2) using user/ssh-key/passphrase

the autotls role uses a hardcoded user in roles/cloudera_manager/autotls/templates/auto-tls.json

{
    "customCA" : false,
    "configureAllServices" : "true",
    "sshPort" : 22,
    {% if freeipa_activated %}"trustedCaCerts" : "/etc/ipa/ca.crt",{% endif %}
    "userName" : "root",
    "password": "{{ node_password }}"
}

Something like

 "userName" : "{{ sudoerUser|default("root") }}"

should be used instead.

Regards

Uli