openstack/openstack-helm
Code Issues Proposed changes

Modify Password validator related settings in Horizon

Browse Source 
Add "enable_pwd_validator" variable to apply password
validator settings when enabled in horizon values.

Modify "PASSWORD_VALIDATOR" so as to enforce password
requirements i.e., password must be at least eight
characters in length and must include characters from
at least two of these groupings: alpha, numeric, and
special characters when "enable_pwd_validator" is enabled.

Change-Id: Ia866feb875490d0bb40e820c6c32ee2cb6aa4c29
This commit is contained in:
Gayathri Devi Kathiri 2020-12-08 11:08:12 +00:00
parent 6f9f7fb11c
commit b65988fa5c
2 changed files with 11 additions and 5 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

2
horizon/Chart.yaml
View File

@ -14,7 +14,7 @@ apiVersion: v1
appVersion: v1.0.0
description: OpenStack-Helm Horizon
name: horizon
version: 0.1.2
version: 0.1.3
home: https://docs.openstack.org/horizon/latest/
icon: https://www.openstack.org/themes/openstack/images/project-mascots/Horizon/OpenStack_Project_Horizon_vertical.png
sources:

14
horizon/values.yaml
View File

@ -189,6 +189,10 @@ conf:
disable_password_reveal: "True"
csrf_cookie_secure: "False"
enforce_password_check: "True"
# Set enable_pwd_validator to true to enforce password validator settings.
enable_pwd_validator: false
pwd_validator_regex: '(?=.*[a-zA-Z])(?=.*\d).{8,}|(?=.*\d)(?=.*\W).{8,}|(?=.*\W)(?=.*[a-zA-Z]).{8,}'
pwd_validator_help_text: '_("Your password must be at least eight (8) characters in length and must include characters from at least two (2) of these groupings: alpha, numeric, and special characters.")'
session_cookie_secure: "False"
session_cookie_httponly: "False"
secure_proxy_ssl_header: false
@ -323,11 +327,13 @@ conf:
'js_spec_files': [],
}
{{- if .Values.conf.horizon.local_settings.config.enable_pwd_validator }}
# Specify a regular expression to validate user passwords.
#HORIZON_CONFIG["password_validator"] = {
# "regex": '.*',
# "help_text": _("Your password does not meet the requirements."),
#}
HORIZON_CONFIG["password_validator"] = {
"regex": '{{ .Values.conf.horizon.local_settings.config.pwd_validator_regex }}',
"help_text": {{ .Values.conf.horizon.local_settings.config.pwd_validator_help_text }},
}
{{- end }}
# Disable simplified floating IP address management for deployments with
# multiple floating IP pools or complex network requirements.