Network Access
The Replicated admin console server listens on 0.0.0.0:8800. Only the administrators responsible for installing, troubleshooting, and updating an application require access to the admin console. For most organizations this will be a smaller group of users than would require access to the application itself. Avoid exposing port 8800 on a network accessible to users other than the application’s administrators.
Console Authentication
The console should be configured to use a password or LDAP for authentication. Avoid selecting the anonymous option, which will disable authentication and allow access to all users on the network.
After installing Replicated there is a period in which access to the console is granted to any user. This is not the same as selecting anonymous authentication because the functions available during this period are limited to:
- Uploading TLS certificates for the console
- Initial upload of a license
- Configuring authentication for the console
Resetting Authentication
Users with root access to the server where Replicated is running can reset the console’s authentication with the CLI. This command should never be run after an application is installed unless the console is on a trusted network.
In case of a forgotten password, use this command to change it without having to temporarily disable authentication.
echo '{"Password": {"Password": "<new password>"}}' | replicatedctl console-auth import