Remove bosh.env.password override

cloudfoundry / bosh-softlayer-cpi-release

An external BOSH CPI for the SoftLayer cloud written in Golang

Apache License 2.0

14 stars 20 forks source link

Remove bosh.env.password override #323

Closed petergtz closed 5 years ago

petergtz commented 5 years ago

This override violates the contract between BOSH and the CPI. It also contradicts BOSH documentation. By removing this override, the vcap user is locked by default, but can be unlocked by specifying bosh.env.password

cfdreddbot commented 5 years ago

:white_check_mark: Hey petergtz! The commit authors and yourself have already signed the CLA.

cf-gitbot commented 5 years ago

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/167067356

The labels on this github issue will be updated when the story is started.

gu-bin commented 5 years ago

The vcap account can't be locked in some cases. To keep the director yml template unique, we need to always provide the bosh.env.password property, setting it to * to lock vcap and special password to unlock it.