You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@knox.apache.org by "Larry McCay (JIRA)" <ji...@apache.org> on 2018/11/08 20:15:00 UTC
[jira] [Comment Edited] (KNOX-1576) Document the --master parameter
for the create-master command
[ https://issues.apache.org/jira/browse/KNOX-1576?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=16680335#comment-16680335 ]
Larry McCay edited comment on KNOX-1576 at 11/8/18 8:14 PM:
------------------------------------------------------------
--master was purposely left out of documentation because I didn't want to encourage its use.
Let's document it but add a caveat about the fact that the use of this as a param will result in the secret being in process listings, maybe in log files (should not be true but could happen), etc. Also, the use of this in automation typically means that it is being stored somewhere in clear text in order to get it in the script. So, documenting it but also discouraging its use would be a good idea.
I should have looked at the patch before I commented. :)
was (Author: lmccay):
--master was purposely left out of documentation because I didn't want to encourage its use.
Let's document it but add a caveat about the fact that the use of this as a param will result in the secret being in process listings, maybe in log files (should not be true but could happen), etc. Also, the use of this in automation typically means that it is being stored somewhere in clear text in order to get it in the script. So, documenting it but also discouraging its use would be a good idea.
> Document the --master parameter for the create-master command
> -------------------------------------------------------------
>
> Key: KNOX-1576
> URL: https://issues.apache.org/jira/browse/KNOX-1576
> Project: Apache Knox
> Issue Type: Improvement
> Components: KnoxCLI
> Affects Versions: 1.1.0
> Reporter: Lars Francke
> Assignee: Lars Francke
> Priority: Trivial
> Fix For: 1.3.0
>
> Attachments: KNOX-1576.1.patch
>
>
> KnoxCLI create-master currently has an undocumented parameter called "--master" which can be used to pass in the master secret without any interaction.
> This is useful to run from things like Ansible. Ambari also uses this.
> This patch just documents this behavior.
--
This message was sent by Atlassian JIRA
(v7.6.3#76005)