From 27c01d01ff1ad8616e46e1ff0d41f589885f15d3 Mon Sep 17 00:00:00 2001
From: Josh Stark
Date: Sat, 30 Mar 2019 11:10:16 +0000
Subject: [PATCH] GitBook: [master] one page modified
---
general/fleet.md | 12 ++++++++++++
1 file changed, 12 insertions(+)
diff --git a/general/fleet.md b/general/fleet.md
index a12f75099..721f3144a 100644
--- a/general/fleet.md
+++ b/general/fleet.md
@@ -142,6 +142,7 @@ fleet.refresh.interval=60
# If set to DATABASE, fleet.admin.username and fleet.admin.password are not used.
fleet.admin.authentication.type=PROPERTIES|DATABASE
+fleet.admin.secret=
# User for management of images and repositories
fleet.admin.username=test
@@ -200,6 +201,17 @@ If you place a property in the system environment, ensure that the property uses
user. The password is hashed using a strong key derivation function (PBKDF2).
+
+ fleet.admin.secret
+ |
+ A string used as part of the password key derivation process. This secret
+ is prepended to the raw password before its key is derived, providing further
+ pseudo-randomness to hashed passwords. Once set, this must not be changed! It
+ is vital to remain the same, as it will be used during the password verification
+ step. If Fleet is restarted with this removed or set differently, the password
+ verification process will fail because previously hashed passwords will
+ have been derived with the old secret. |
+
fleet.admin.username
|