OT-CONTAINER-KIT / redis

A production optimized redis docker image
https://opstree.github.io
23 stars 51 forks source link

fix insecure password passing during redis-cluster startup #27

Closed bsteinm2 closed 1 year ago

bsteinm2 commented 1 year ago

During redis-cluster pod startup, while the leader and follower pods are self-registering, they provide passwords in plaintext, which is visible in observability/security tools watching the kubernetes control plane. This PR implements the fix described here: "NOTE: For security reasons, provide the password to redis-cli automatically via the REDISCLI_AUTH environment variable."

shubham-cmyk commented 1 year ago

LGTM !