search

Oteemo / charts

Helm chart repository
https://oteemo.github.io/charts
MIT License
181 stars 234 forks source link

Sonarqube - Postgresql uses Hardcoded password instead of randomly generated #293

Closed Homopatrol closed 2 years ago

Homopatrol commented 2 years ago

The Postgresql password is being hard coded in values.yaml, it is not good practice to hardcode default credentials in Helm charts especially when the Postgresql chart contains a random-generate function to create passwords. 

postgresql:
...
  postgresqlUsername: "sonarUser"
  postgresqlPassword: "sonarPass"
  postgresqlDatabase: "sonarDB"

A clear and concise description of what the bug is. this is not good practice to use a fixed password, especially when the rando-generate function is already in the chart

Version of Helm and Kubernetes

Helm v3.5.2 Kubernetes 1.19.0

mtcolman commented 2 years ago

I think #257 is linked to this too.