Document password policy entropy source #992
Open
Conversation
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Vercel Previews Deployed
|
Broken Link CheckerNo broken links found! 🎉 |
schavis
requested changes
Sep 25, 2025
Comment on lines
43
to
46
| - `entropy_source` `(string: "")` - Specifies the source of entropy | ||
| (randomness) used to generate the passwords. The default ("") and | ||
| "platform" source randomness from the platform RNG. "seal" (enterprise | ||
| only) sources entropy from the entropy augmentation. |
There was a problem hiding this comment.
Suggested change
| - `entropy_source` `(string: "")` - Specifies the source of entropy | |
| (randomness) used to generate the passwords. The default ("") and | |
| "platform" source randomness from the platform RNG. "seal" (enterprise | |
| only) sources entropy from the entropy augmentation. | |
| - `entropy_source` `(string: "platform")` - Specifies the source of entropy | |
| (randomness) used to generate the passwords. Must be one of: | |
| - `platform` - source randomness from the platform RNG. | |
| - `seal` - source entropy from the entropy augmentation. <EnterpriseAlert inline="true" /> |
It sounds like the default is platform?
There was a problem hiding this comment.
The default is unset, because existing policies won't have a value for it. We could change the readout code to produce platform, but it'd produce Terraform diffs.
There was a problem hiding this comment.
I like the formatting and ent fixes though
There was a problem hiding this comment.
Phrased it as "" means "default source"
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Add this suggestion to a batch that can be applied as a single commit.
This suggestion is invalid because no changes were made to the code.
Suggestions cannot be applied while the pull request is closed.
Suggestions cannot be applied while viewing a subset of changes.
Only one suggestion per line can be applied in a batch.
Add this suggestion to a batch that can be applied as a single commit.
Applying suggestions on deleted lines is not supported.
You must change the existing code in this line in order to create a valid suggestion.
Outdated suggestions cannot be applied.
This suggestion has been applied or marked resolved.
Suggestions cannot be applied from pending reviews.
Suggestions cannot be applied on multi-line comments.
Suggestions cannot be applied while the pull request is queued to merge.
Suggestion cannot be applied right now. Please check back later.
System wide password policies now have a new config parameter,
entropy_sourcewhich allows customers to picksealif they want entroyfrom entropy augmentation.