Creating CKS Cluster on 4.20 fails when using strong password settings #11626
Description
problem
We are using password settings which require 2 special characters. So far we had no problems, but when i started testing cks it seems like this password policy also applies to the cks clusters.
versions
4.20.1
CKS Image from packages.cloudstack.org 1.33.1
The steps to reproduce the bug
- enforce password policy (2 special characters)
- create cks cluster
What to do about it?
No response
Metadata
Metadata
Assignees
Labels
No labels
Activity
kiranchavala commentedon Sep 12, 2025
@jgotteswinter
Could you please share the settings of your environment
weizhouapache commentedon Sep 12, 2025
this seems to be a real issue
when CKS create kubeadm user for account or project, it just uses the password generated by
which contains only number, letter and hyphen (
-)SviridoffA commentedon Sep 12, 2025
same issue 4.19.3
jgotteswinter commentedon Sep 15, 2025
Setting the password policy to non-default password length also ends in an error when creating a cks cluster. In my case i tested it with a min length of 12.
weizhouapache commentedon Sep 15, 2025
can you change to 8 and retry ?
it seems to be a bug
weizhouapache commentedon Sep 15, 2025
@jgotteswinter
did you create CKS cluster in project or not ?
jgotteswinter commentedon Sep 15, 2025
Yes, this was tested inside a project which belongs to a domain admin. As a temporary workaround i modified the domains password policy to a length of 8 and no enforcement of special characters. After that i was able to create a cks cluster successfully.
weizhouapache commentedon Oct 1, 2025
fixed by #11639