summaryrefslogtreecommitdiffstats
path: root/ansible/roles/rancher/defaults/main.yml
diff options
context:
space:
mode:
authorPetr OspalĂ˝ <p.ospaly@partner.samsung.com>2019-04-08 08:39:41 +0200
committerMichal Ptacek <m.ptacek@partner.samsung.com>2019-04-24 14:04:17 +0000
commit3a6558a1af5ba14bc6614d94f768dd1a1fc86d9b (patch)
tree9c442934b9dbe7dfb5eedc25b27652265a043d79 /ansible/roles/rancher/defaults/main.yml
parent72b09b1a46200b6544600ff2432693f0b43c3918 (diff)
Add support for resetting the admin password
The module rancher1_api can now reset an admin password of the default admin account (account_id: '1a1') and keep local authentication enabled. By default the authentication is not enabled, because the ansible module rancher_k8s_environment.py is not idempotent and it would need to be rewritten. Change-Id: Ib432537651b91216c32438ec1233dba3602e3faf Issue-ID: OOM-1734 Signed-off-by: Petr OspalĂ˝ <p.ospaly@partner.samsung.com>
Diffstat (limited to 'ansible/roles/rancher/defaults/main.yml')
-rw-r--r--ansible/roles/rancher/defaults/main.yml7
1 files changed, 7 insertions, 0 deletions
diff --git a/ansible/roles/rancher/defaults/main.yml b/ansible/roles/rancher/defaults/main.yml
index e4d5cb9f..6d354e6e 100644
--- a/ansible/roles/rancher/defaults/main.yml
+++ b/ansible/roles/rancher/defaults/main.yml
@@ -22,5 +22,12 @@ rancher:
# Auto-purge Audit Log entries after this long (seconds)
audit_log_purge_after_seconds: 2592000 # 30 days
+ # By default we don't enable local authentication (mainly due to
+ # to the fact that rancher_k8s_environment.py would have to be
+ # rewritten completely)
+ # But if you don't need to run rancher_kubernetes playbook more
+ # than once (you should not have to under the terms of a regular
+ # installation), then you can safely enable it.
+ auth_enabled: false
# Set this password for the rancher admin account:
admin_password: "admin"