SUSE Support

Here When You Need Us

Reminder events about default admin user's default pwd is not changed yet.

This document (000021082) is provided subject to the disclaimer at the end of this document.

Environment

NeuVector deployed from Rancher

Situation

In version 5.1.0, a new controller ENV variable NO_DEFAULT_ADMIN will instruct the controller not to create an 'admin' user when deploying with Rancher SSO.  More details here on it --> https://open-docs.neuvector.com/releasenotes/5x#510-december-2022
  • Add new env variable NO_DEFAULT_ADMIN which when enabled does not create an 'admin' user. This is used for Rancher SSO integration as the default. If not enabled, persistently warn the user and record events to change the default admin password if it is not changed from default.
The above is for reference for future cluster deployments.

If NeuVector is already deployed, you can use the following method to change the default password and subside the reminder event.

Resolution

Method 1: (kubectl port-forward)

Since WebUI is exposed with ClusterIP, you cannot access it outside the cluster.  You can port-forward it with kubectl to your desktop if you have cluster access using kubectl.

Example:
`kubectl port-forward $(kubectl get pods --selector "app=neuvector-manager-pod" --output=name -n cattle-neuvector-system) 8443:8443 -n cattle-neuvector-system`
browser --> https://127.0.0.1:8443
login admin/admin and change password

Method 2: (via api/federated Managed exposed outside of the cluster with LB or Ingress)

Authenticate via REST API and change the password.  Please see our documentation on how to authenticate and obtain the TOKEN for subsequent calls here --> https://open-docs.neuvector.com/automation/automation.  You will need to make POST /v1/auth followed by PATCH /v1/user/:user (/v1/user/admin).  There is a kb to explain how to configure Postman to work with the apis.yaml here --> https://www.suse.com/support/kb/doc/?id=000020929.  Method 1 may be easier if you are unfamiliar with using the NV REST API.

Disclaimer

This Support Knowledgebase provides a valuable tool for SUSE customers and parties interested in our products and solutions to acquire information, ideas and learn from one another. Materials are provided for informational, personal or non-commercial use within your organization and are presented "AS IS" WITHOUT WARRANTY OF ANY KIND.

  • Document ID:000021082
  • Creation Date: 23-May-2023
  • Modified Date:26-Jul-2023
    • SUSE NeuVector

< Back to Support Search

For questions or concerns with the SUSE Knowledgebase please contact: tidfeedback[at]suse.com

tick icon

SUSE Support Forums

Get your questions answered by experienced Sys Ops or interact with other SUSE community experts.

tick icon

Support Resources

Learn how to get the most from the technical support you receive with your SUSE Subscription, Premium Support, Academic Program, or Partner Program.

tick icon

Open an Incident

Open an incident with SUSE Technical Support, manage your subscriptions, download patches, or manage user access.