Merge pull request #307 from imperva/cpapke/remove-password-requirements

Update password restriction, fix validation
imperva · Nov 21, 2023 · 5a3e082 · 5a3e082
2 parents 7577078 + 051648f
commit 5a3e082
Show file tree

Hide file tree

Showing 6 changed files with 12 additions and 12 deletions.
diff --git a/modules/aws/agentless-gw/variables.tf b/modules/aws/agentless-gw/variables.tf
@@ -169,8 +169,8 @@ variable "password" {
   sensitive   = true
   description = "Initial password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }
 

diff --git a/modules/aws/hub/variables.tf b/modules/aws/hub/variables.tf
@@ -183,8 +183,8 @@ variable "password" {
   sensitive   = true
   description = "Initial password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }
 

diff --git a/modules/aws/sonar-base-instance/variables.tf b/modules/aws/sonar-base-instance/variables.tf
@@ -112,8 +112,8 @@ variable "password" {
   sensitive   = true
   description = "Password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }
 

diff --git a/modules/azurerm/agentless-gw/variables.tf b/modules/azurerm/agentless-gw/variables.tf
@@ -160,8 +160,8 @@ variable "password" {
   sensitive   = true
   description = "Initial password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }
 

diff --git a/modules/azurerm/hub/variables.tf b/modules/azurerm/hub/variables.tf
@@ -180,8 +180,8 @@ variable "password" {
   sensitive   = true
   description = "Initial password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }
 

diff --git a/modules/azurerm/sonar-base-instance/variables.tf b/modules/azurerm/sonar-base-instance/variables.tf
@@ -109,8 +109,8 @@ variable "password" {
   sensitive   = true
   description = "Password for all users"
   validation {
-    condition     = var.password == null || try(length(var.password) > 8, false)
-    error_message = "Must be at least 8 characters. Used only if 'password_secret_name' is not set."
+    condition     = var.password == null || try(length(var.password) >= 7, false)
+    error_message = "Must be at least 7 characters. Used only if 'password_secret_name' is not set."
   }
 }