Creating CKS Cluster on 4.20 fails when using strong password settings

[jgotteswinter]

problem

We are using password settings which require 2 special characters. So far we had no problems, but when i started testing cks it seems like this password policy also applies to the cks clusters.

versions

4.20.1
CKS Image from packages.cloudstack.org 1.33.1

The steps to reproduce the bug

1. enforce password policy (2 special characters)
2. create cks cluster

What to do about it?

No response

[kiranchavala]

@jgotteswinter

Could you please share the settings of your environment

[weizhouapache]

this seems to be a real issue

when CKS create kubeadm user for account or project, it just uses the password generated by

UUID.randomUUID().toString()

which contains only number, letter and hyphen (-)

[SviridoffA]

same issue 4.19.3

[jgotteswinter]

Setting the password policy to non-default password length also ends in an error when creating a cks cluster. In my case i tested it with a min length of 12.

[weizhouapache]

Setting the password policy to non-default password length also ends in an error when creating a cks cluster. In my case i tested it with a min length of 12.

can you change to 8 and retry ?
it seems to be a bug

[weizhouapache]

@jgotteswinter
did you create CKS cluster in project or not ?

[jgotteswinter]

Yes, this was tested inside a project which belongs to a domain admin. As a temporary workaround i modified the domains password policy to a length of 8 and no enforcement of special characters. After that i was able to create a cks cluster successfully.

[weizhouapache]

fixed by #11639