Skip to content

Add BOSH user credentials support to Genesis#519

Open
wayneeseguin wants to merge 1 commit intov3.1.x-devfrom
v3.1.x-feature/bosh-user-creds
Open

Add BOSH user credentials support to Genesis#519
wayneeseguin wants to merge 1 commit intov3.1.x-devfrom
v3.1.x-feature/bosh-user-creds

Conversation

@wayneeseguin
Copy link
Contributor

Implement support for personal BOSH user credentials via environment
variables (BOSH_USER/BOSH_PASSWORD), allowing operators to use their
own credentials instead of shared admin credentials from Vault.

Key changes:

  • Add user credential detection and validation in Service::BOSH::Director
  • Prioritize user credentials over admin credentials in credential detection
  • Support dual credential format (user/client) for BOSH CLI compatibility
  • Update Genesis::Env to check for user credentials first
  • Add comprehensive documentation and examples

Benefits:

  • Improved security with individual user authentication
  • Better audit trails showing who performed each action
  • Reduced credential sharing across teams
  • Maintains full backward compatibility

The implementation follows BOSH CLI standards and all existing workflows
continue to work unchanged. When BOSH_USER and BOSH_PASSWORD are set,
Genesis automatically uses them and sets both user and client credential
formats for maximum compatibility.

Note: UAA admin credential storage remains the responsibility of the
BOSH kit, not Genesis core.

  Implement support for personal BOSH user credentials via environment
  variables (BOSH_USER/BOSH_PASSWORD), allowing operators to use their
  own credentials instead of shared admin credentials from Vault.

  Key changes:
  - Add user credential detection and validation in Service::BOSH::Director
  - Prioritize user credentials over admin credentials in credential detection
  - Support dual credential format (user/client) for BOSH CLI compatibility
  - Update Genesis::Env to check for user credentials first
  - Add comprehensive documentation and examples

  Benefits:
  - Improved security with individual user authentication
  - Better audit trails showing who performed each action
  - Reduced credential sharing across teams
  - Maintains full backward compatibility

  The implementation follows BOSH CLI standards and all existing workflows
  continue to work unchanged. When BOSH_USER and BOSH_PASSWORD are set,
  Genesis automatically uses them and sets both user and client credential
  formats for maximum compatibility.

  Note: UAA admin credential storage remains the responsibility of the
  BOSH kit, not Genesis core.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant