Postgres secrets written to wrong destination in Nomad are visible in UI - Githubissues

Skatteetaten / terraform-nomad-postgres

Apache License 2.0

8 stars 5 forks source link

Postgres secrets written to wrong destination in Nomad are visible in UI #77

Closed lmjelstad closed 3 years ago

lmjelstad commented 3 years ago

Current behaviour

The Postgres secrets are written to local/secrets/.envs https://github.com/Skatteetaten/terraform-nomad-postgres/blob/master/conf/nomad/postgres.hcl#L89

This location is open in Nomad UI, and the username/password can be read

Expected behaviour

Secrets should not be available in Nomad UI

How to reproduce?

Deploy Postgres module and look at files in Nomad UI

Suggestion(s)/solution(s) [Optional]

Move secrets to secrets/.envs

Checklist (after created issue)

[x] Added label(s)
[ ] Added to project
[ ] Added to milestone