bitflicker64 commented on PR #3132: URL: https://github.com/apache/hugegraph/pull/3132#issuecomment-5165892607
Addressed in 34234e33. The wrapper now writes `auth.admin_pa` from the Secret it already mounts as `PASSWORD`, alongside `usePD` and `pd.peers`, rejecting values with properties-parser metacharacters (newline, CR, backslash, leading whitespace). Verified against a composition of current master plus #3119/#3126/#3130: an auth-enabled install starts cleanly with init-store disabled, unauthenticated requests and the default `admin:pa` both get 401, and the Secret credential authenticates end to end, including through the new Hubble login. Both caveats are documented in the chart README: `auth.admin_pa` applies only at first creation, so the Secret cannot rotate an existing cluster's password, and the value lands in `rest-server.properties` (mode 600) inside the container. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
