Include a gateway user in Standard configuration by default

[alxndrsn]

This would save one extra step of configuration when setting up a Standard instance.

[SCdF]

@alxndrsn what is involved here? Standard configuration is a collection of app settings and forms right? How could we include a default user? Or are you suggesting we write a migration script / init check to add a gateway user if it doesn't already exist?

[alxndrsn]

I'm not fussed how it's implemented, but I think there should be a gateway user set up out-of-the-box or as part of the initial setup process (I think there is a wizard for this).

[SCdF]

@abbyad / @browndav do you two have any thoughts about this? It's hard to tell where it should live: it is something we should be adding to the standard setup script? Or is this something medic-os is supposed to do somehow?

I'm not sure how our current single admin user is setup honestly.

[abbyad]

Doing this via a script is not ideal since creating users with medic-api also creates a Place and Person for the user -- it was not designed for creating gateway users.

If we want to create the gateway user automatically then it could be done by concierge. @browndav can provide more details on that.

Alternatively we could just have a seed image for Standard that is a snapshot of an instance that is already configured, and includes a gateway user. cc @henokgetachew

[ghost]

I'd prefer we not use images of preconfigured instances; that'll cause reuse of (locally-configured) service account passwords and host keys. We already create a number of CouchDB users for use by local services; it wouldn't be that hard to add a gateway user via concierge if we can document the requirements here.

[SCdF]

@alxndrsn can you document the requirements for @browndav. It sounds easy and like a nice thing to smooth over, so scheduled.

[alxndrsn]

I think this should do it:

username: gateway
role: gateway

[ghost]

It looks like this needs two distinct steps:

• Patch concierge to add the appropriate gateway user on first run
• Backpatch existing machines by creating the account via shell script (and I have one)

[garethbowen]

This should be done but it's not a priority right now. Moving out of the milestone.

[abbyad]

@browndav is this still in progress, or completed already?

[garethbowen]

Closing as ancient.