19.5. Removing the admin user
Red Hat Advanced Cluster Security for Kubernetes (RHACS) creates an administrator account, admin, during the installation process that can be used to log in with a user name and password. The password is dynamically generated unless specifically overridden and is unique to your RHACS instance.
In production environments, it is highly recommended to create an authentication provider and remove the admin user.
19.5.1. Removing the admin user after installation 复制链接链接已复制到粘贴板!
After an authentication provider has been successfully created, it is strongly recommended to remove the admin user.
Removing the admin user is dependent on the installation method of the RHACS portal.
Procedure
Perform one of the following procedures:
-
For Operator installations, set
central.adminPasswordGenerationDisabledtotruein yourCentralcustom resource. For Helm installations:
-
In your
CentralHelm configuration, setcentral.adminPassword.generatetofalse. - Follow the steps to change the configuration. See "Changing configuration options after deployment" for more information.
-
In your
For
roxctlinstallations:-
When generating the manifest, set
Disable password generationtofalse. -
Follow the steps to install Central by using
roxctlto apply the changes. See "Install Central using the roxctl CLI" for more information.
-
When generating the manifest, set
Additional resources
After applying the configuration changes, you cannot log in as an admin user.
You can add the admin user again as a fallback by reverting the configuration changes. When enabling the admin user again, a new password is generated.