Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

fix: adds handling for a KC_CLI_PASSWORD env variable #29430

Merged
merged 1 commit into from
Jun 6, 2024

Conversation

shawkins
Copy link
Contributor

@shawkins shawkins commented May 9, 2024

closes: #21961

Went the route of picocli defaults for this. We could consider adding a general default handler, but option keys for the "secrets" don't seem consistent.

The other possible "secret" env variables (not addressed in this pr) include:

  • the truststore password (although we are trying to move away from truststores that require a password)
  • the initial token
  • the registration token

Copy link
Contributor

@vmuzikar vmuzikar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@shawkins Thanks for this enhancement.

I think it might be good to also document it that it now accepts env var? Possibly here?

@shawkins
Copy link
Contributor Author

@vmuzikar updated the punctuation / typo. I'm now thinking this is probably too narrow in scope. Users would expect the same behavior for the client secret, store pass, etc. Does it seem ok to expend the effort for all of these?

@vmuzikar
Copy link
Contributor

Does it seem ok to expend the effort for all of these?

Works for me.

@shawkins shawkins force-pushed the iss21961 branch 4 times, most recently from 1e26c33 to fbeda94 Compare May 28, 2024 13:21
@shawkins
Copy link
Contributor Author

@vmuzikar updated to all kcadm sensitive options, which covers some of kcreg as well. Added a few mentions in the docs. Can also add a v26 release note if desired.

Copy link
Contributor

@vmuzikar vmuzikar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM, thank you @shawkins.

closes: keycloak#21961

Signed-off-by: Steve Hawkins <shawkins@redhat.com>
@vmuzikar vmuzikar enabled auto-merge (squash) June 6, 2024 11:18
@vmuzikar vmuzikar merged commit c7e9ee2 into keycloak:main Jun 6, 2024
62 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

Successfully merging this pull request may close these issues.

Allow to provider password to kcadm (keycloak-admin-cli) via environment variable
2 participants