Closed kvaps closed 3 weeks ago
The changes include an update to the version number in the Chart.yaml
file from 0.3.0
to 0.4.0
. Additionally, a new Kubernetes Role resource is defined in dashboard-resourcemap.yaml
, granting access to services and secrets. The init-script.yaml
has been modified to improve user credential management by dynamically generating passwords or retrieving them from an existing Secret, enhancing security practices.
Files | Change Summary |
---|---|
packages/apps/ferretdb/Chart.yaml |
Version updated from 0.3.0 to 0.4.0 . |
packages/apps/ferretdb/templates/dashboard-resourcemap.yaml |
New Role resource defined for managing access to services and secrets, dynamically named based on the release name. |
packages/apps/ferretdb/templates/init-script.yaml |
Initialization script modified to retrieve or dynamically generate user passwords, replacing hardcoded assignments with a more secure and flexible approach. |
sequenceDiagram
participant User
participant SecretManager
participant RoleManager
User->>SecretManager: Request user credentials
SecretManager->>SecretManager: Retrieve existing Secret
SecretManager->>SecretManager: Decode passwords
SecretManager->>User: Return passwords
User->>SecretManager: No password provided
SecretManager->>SecretManager: Generate random password
SecretManager->>SecretManager: Create new Secret with credentials
SecretManager->>RoleManager: Define Role for access
RoleManager->>User: Grant access to resources
Hop, hop, hooray, what a change today!
New secrets and roles, in a secure ballet.
Passwords now dance, both fresh and bright,
In the land of Kubernetes, all feels just right!
With each little tweak, we leap and we bound,
In our fluffy world, joy and safety abound! 🐇✨
Thank you for using CodeRabbit. We offer it for free to the OSS community and would appreciate your support in helping us grow. If you find it useful, would you consider giving us a shout-out on your favorite social media?
Signed-off-by: Andrei Kvapil kvapss@gmail.com
Summary by CodeRabbit