From 09404f8ddc4fdfb1c0904cb7037e860f229307aa Mon Sep 17 00:00:00 2001 From: Matt Pollard Date: Tue, 11 Apr 2023 11:39:08 +0200 Subject: [PATCH] Add conceptual overview to "Installing" articles' configuration section, including warning about attack vector (#36256) --- .../installing-github-enterprise-server-on-aws.md | 4 ++++ .../installing-github-enterprise-server-on-azure.md | 4 ++++ ...ling-github-enterprise-server-on-google-cloud-platform.md | 4 ++++ .../installing-github-enterprise-server-on-hyper-v.md | 4 ++++ .../installing-github-enterprise-server-on-openstack-kvm.md | 4 ++++ .../installing-github-enterprise-server-on-vmware.md | 4 ++++ .../new-instance-attack-vector-warning.md | 5 +++++ .../enterprise_installation/new-instance-config-summary.md | 1 + 8 files changed, 30 insertions(+) create mode 100644 data/reusables/enterprise_installation/new-instance-attack-vector-warning.md create mode 100644 data/reusables/enterprise_installation/new-instance-config-summary.md diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-aws.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-aws.md index 985df5c0ed..2e9450be6d 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-aws.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-aws.md @@ -134,6 +134,10 @@ Both primary and replica instances should be assigned separate EIPs in productio ## Configuring the {% data variables.product.prodname_ghe_server %} instance +{% data reusables.enterprise_installation.new-instance-config-summary %} + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + {% data reusables.enterprise_installation.copy-the-vm-public-dns-name %} {% data reusables.enterprise_installation.upload-a-license-file %} {% data reusables.enterprise_installation.save-settings-in-web-based-mgmt-console %} For more information, see "[AUTOTITLE](/admin/configuration/configuring-your-enterprise)." diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-azure.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-azure.md index 3fbb298b04..16f9daa871 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-azure.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-azure.md @@ -79,6 +79,10 @@ Before launching {% data variables.location.product_location %} on Azure, you'll ## Configuring the {% data variables.product.prodname_ghe_server %} virtual machine +To configure the instance, you must confirm the instance's status, upload a license file, set the {% ifversion enterprise-management-console-multi-user-auth %}root {% endif %} {% data variables.enterprise.management_console %} password, configure the instance's settings, and restart the instance. + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + 1. Before configuring the VM, you must wait for it to enter ReadyRole status. Check the status of the VM with the `vm list` command. For more information, see "[`az vm list`](https://docs.microsoft.com/cli/azure/vm?view=azure-cli-latest#az_vm_list)" in the Microsoft documentation. ```shell $ az vm list -d -g RESOURCE_GROUP -o table diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-google-cloud-platform.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-google-cloud-platform.md index 5e403b2eb4..89974bd98f 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-google-cloud-platform.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-google-cloud-platform.md @@ -89,6 +89,10 @@ To create the {% data variables.product.prodname_ghe_server %} instance, you'll ## Configuring the instance +{% data reusables.enterprise_installation.new-instance-config-summary %} + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + {% data reusables.enterprise_installation.copy-the-vm-public-dns-name %} {% data reusables.enterprise_installation.upload-a-license-file %} {% data reusables.enterprise_installation.save-settings-in-web-based-mgmt-console %} For more information, see "[AUTOTITLE](/admin/configuration/configuring-your-enterprise)." diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-hyper-v.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-hyper-v.md index 9943849638..55a4b8314b 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-hyper-v.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-hyper-v.md @@ -60,6 +60,10 @@ shortTitle: Install on Hyper-V ## Configuring the {% data variables.product.prodname_ghe_server %} instance +{% data reusables.enterprise_installation.new-instance-config-summary %} + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + {% data reusables.enterprise_installation.copy-the-vm-public-dns-name %} {% data reusables.enterprise_installation.upload-a-license-file %} {% data reusables.enterprise_installation.save-settings-in-web-based-mgmt-console %} For more information, see "[AUTOTITLE](/admin/configuration/configuring-your-enterprise)." diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-openstack-kvm.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-openstack-kvm.md index c217e3a47c..5f65f144bf 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-openstack-kvm.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-openstack-kvm.md @@ -45,6 +45,10 @@ shortTitle: Install on OpenStack ## Configuring the {% data variables.product.prodname_ghe_server %} instance +{% data reusables.enterprise_installation.new-instance-config-summary %} + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + {% data reusables.enterprise_installation.copy-the-vm-public-dns-name %} {% data reusables.enterprise_installation.upload-a-license-file %} {% data reusables.enterprise_installation.save-settings-in-web-based-mgmt-console %} For more information, see "[AUTOTITLE](/admin/configuration/configuring-your-enterprise)." diff --git a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-vmware.md b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-vmware.md index 11e17e5d28..fc9a7fd66b 100644 --- a/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-vmware.md +++ b/content/admin/installation/setting-up-a-github-enterprise-server-instance/installing-github-enterprise-server-on-vmware.md @@ -46,6 +46,10 @@ shortTitle: Install on VMware ## Configuring the {% data variables.product.prodname_ghe_server %} instance +{% data reusables.enterprise_installation.new-instance-config-summary %} + +{% data reusables.enterprise_installation.new-instance-attack-vector-warning %} + {% data reusables.enterprise_installation.copy-the-vm-public-dns-name %} {% data reusables.enterprise_installation.upload-a-license-file %} {% data reusables.enterprise_installation.save-settings-in-web-based-mgmt-console %} For more information, see "[AUTOTITLE](/admin/configuration/configuring-your-enterprise)." diff --git a/data/reusables/enterprise_installation/new-instance-attack-vector-warning.md b/data/reusables/enterprise_installation/new-instance-attack-vector-warning.md new file mode 100644 index 0000000000..4d5b39b7ff --- /dev/null +++ b/data/reusables/enterprise_installation/new-instance-attack-vector-warning.md @@ -0,0 +1,5 @@ +{% warning %} + +**Warning**: To prevent an attacker from compromising the new instance, ensure that you personally set the {% ifversion enterprise-management-console-multi-user-auth %}root {% endif %}{% data variables.enterprise.management_console %} password and create the first user as soon as possible. + +{% endwarning %} diff --git a/data/reusables/enterprise_installation/new-instance-config-summary.md b/data/reusables/enterprise_installation/new-instance-config-summary.md new file mode 100644 index 0000000000..5fb4d6ba8f --- /dev/null +++ b/data/reusables/enterprise_installation/new-instance-config-summary.md @@ -0,0 +1 @@ +To configure the instance, you must upload a license file, set the {% ifversion enterprise-management-console-multi-user-auth %}root {% endif %}{% data variables.enterprise.management_console %} password, configure the instance's settings, and restart the instance. \ No newline at end of file