Marty Hernandez Avedon
489b54c333
* 593 Add password requirments * re-organize page to use tabs, remove redundant material * eng: Bootstrap password has no validation/length requirements, subsequent admin passwords must be 12 chars or longer * update quickstart guides with link to password requirments * link to content in setting up bootstrap password * Apply suggestions from code review Co-authored-by: Lucas Saintarbor <lucas.saintarbor@suse.com> * suggestions from code review * update password requirements * helm cli * fix link * another link * Apply suggestions from code review Co-authored-by: Billy Tat <btat@suse.com> * sync 2.8 * syncing 2.7 * adding in helm-cli sync for 2.7 & 2.8 --------- Co-authored-by: Lucas Saintarbor <lucas.saintarbor@suse.com> Co-authored-by: Billy Tat <btat@suse.com>
2.2 KiB
title
| title |
|---|
| Setting up the Bootstrap Password |
When you install Rancher, you can set a bootstrap password for the first admin account.
If you choose not to set a bootstrap password, Rancher randomly generates a bootstrap password for the first admin account.
For details on how to set the bootstrap password, see below.
Password Requirements
The bootstrap password can be any length.
When you reset the first admin account's password after first login, the new password must be at least 12 characters long.
You can customize the minimum password length for user accounts, within limitations.
Minimum password length can be any positive integer value between 2 and 256. Decimal values and leading zeroes are not allowed.
Specifying the Bootstrap Password
During Rancher installation, set bootstrapPassword alongside any other flags for the Rancher Helm chart. For example:
helm install rancher rancher-<chart-repo>/rancher \
--set bootstrapPassword=<password>
Pass the following value to the Docker install command:
-e CATTLE_BOOTSTRAP_PASSWORD=<password>
Retrieving the Bootstrap Password
The bootstrap password is stored in the Docker container logs. After Rancher is installed, the UI shows instructions for how to retrieve the password based on your installation method.
kubectl get secret --namespace cattle-system bootstrap-secret -o go-template='{{ .data.bootstrapPassword|base64decode}}{{ "\n" }}'
docker logs container-id 2>&1 | grep "Bootstrap Password:"