hashicorp / terraform-enterprise-helm

The official repo for Terraform Enterprise helm charts
Mozilla Public License 2.0
16 stars 17 forks source link

Allowing users to pass in Sensitive Information #54

Open jacobmammoliti opened 11 months ago

jacobmammoliti commented 11 months ago

This Helm chart allows users to pass in a TLS key along with other sensitive information as Helm values. Giving users this ability is strongly not recommended. Users should be encouraged to create secrets outside of the Helm chart and then reference them by name within it. Both the Vault and Consul Helm charts do this and also do not allow users to pass in potentially sensitive information.

Allowing users to define Kubernetes secrets with data in a Helm chart is not a good practice.