nforgeio / neonKUBE

Public NeonKUBE Kubernetes distribution related projects
https://neonkube.io
Apache License 2.0
78 stars 13 forks source link

security: neon-image prepare AWS sets insecure password #1542

Closed jefflill closed 2 years ago

jefflill commented 2 years ago

AwsImageHost configures the instance used to create base and node images with insecure SSH credentials:

sysadmin/sysadmin0000

This means that these VMs are essentially open to the internet while we're configuring the related base or node image.

NOTE: Although this insecure password is included in the neonKUBE on-premise images, this isn't really an issue when creating instances from the node image when deploying a cluster because we set a secure password before configuring the network and the virtual machines for on-premise image creation aren't exposed to the Internet.

We set the insecure password this to make it easier to debug user-data scripts.

jefflill commented 2 years ago

FIXED