(cloudstack) branch 4.20 updated: CKS: generate a random UUID as password of CKS user in project (#11639)

[weizhou]

This is an automated email from the ASF dual-hosted git repository.

weizhou pushed a commit to branch 4.20
in repository https://gitbox.apache.org/repos/asf/cloudstack.git


The following commit(s) were added to refs/heads/4.20 by this push:
     new c631d6a480d CKS: generate a random UUID as password of CKS user in 
project (#11639)
c631d6a480d is described below

commit c631d6a480dfc89475c14bead84ae309c78d3d81
Author: Wei Zhou <weiz...@apache.org>
AuthorDate: Wed Oct 1 08:47:58 2025 +0200

    CKS: generate a random UUID as password of CKS user in project (#11639)
---
 .../com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java   | 2 +-
 server/src/main/java/com/cloud/user/AccountManagerImpl.java          | 5 ++++-
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git 
a/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
 
b/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
index 9b3e487680d..5a171296826 100644
--- 
a/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
+++ 
b/plugins/integrations/kubernetes-service/src/main/java/com/cloud/kubernetes/cluster/KubernetesClusterManagerImpl.java
@@ -1551,7 +1551,7 @@ public class KubernetesClusterManagerImpl extends 
ManagerBase implements Kuberne
         try {
             Role role = getProjectKubernetesAccountRole();
             UserAccount userAccount = 
accountService.createUserAccount(accountName,
-                    UuidUtils.first(UUID.randomUUID().toString()), 
PROJECT_KUBERNETES_ACCOUNT_FIRST_NAME,
+                    UUID.randomUUID().toString(), 
PROJECT_KUBERNETES_ACCOUNT_FIRST_NAME,
                     PROJECT_KUBERNETES_ACCOUNT_LAST_NAME, null, null, 
accountName, Account.Type.NORMAL, role.getId(),
                     project.getDomainId(), null, null, null, null, 
User.Source.NATIVE);
             projectManager.assignAccountToProject(project, 
userAccount.getAccountId(), ProjectAccount.Role.Regular,
diff --git a/server/src/main/java/com/cloud/user/AccountManagerImpl.java 
b/server/src/main/java/com/cloud/user/AccountManagerImpl.java
index 04a64fbfc8c..2f6392ffaad 100644
--- a/server/src/main/java/com/cloud/user/AccountManagerImpl.java
+++ b/server/src/main/java/com/cloud/user/AccountManagerImpl.java
@@ -2747,7 +2747,10 @@ public class AccountManagerImpl extends ManagerBase 
implements AccountManager, M
             logger.debug("Creating user: " + userName + ", accountId: " + 
accountId + " timezone:" + timezone);
         }
 
-        passwordPolicy.verifyIfPasswordCompliesWithPasswordPolicies(password, 
userName, getAccount(accountId).getDomainId());
+        Account callingAccount = getCurrentCallingAccount();
+        if (callingAccount.getId() != Account.ACCOUNT_ID_SYSTEM) {
+            
passwordPolicy.verifyIfPasswordCompliesWithPasswordPolicies(password, userName, 
getAccount(accountId).getDomainId());
+        }
 
         String encodedPassword = null;
         for (UserAuthenticator authenticator : _userPasswordEncoders) {