cnoe-io / idpbuilder

Spin up a complete internal developer platform with only Docker required as a dependency.
https://cloud-native.slack.com/archives/C05TN9WFN5S
Apache License 2.0
200 stars 59 forks source link

Feature: Gitea auth support #378

Closed abangser closed 1 month ago

abangser commented 2 months ago

Have you searched for this feature request?

Problem Statement

idpbuilder generates Gitea with a strong password. This password has special characters enabled and can creates issues (such as in #283) when trying to use it in command/other applications.

Possible Solution

Automatically generate a token for the admin user and store in a known secret. This will allow more secure authentication methods and remove the need to change the password.

Alternatives Considered

There are a number of options we discussed in Slack with @nabuskey including:

  1. Reducing the complexity of the password (not ideal as it reduces the security of gitea if made publicly available) a. Allow people to opt into this in some way with a flag
  2. Create a git token by default for admin user and store in a known secret