Encryption of Username and Password

jenningsloy318 / redfish_exporter

exporter to get metrics from redfish based hardware such as lenovo/dell/superc servers

Apache License 2.0

70 stars 61 forks source link

Encryption of Username and Password #70

Open FarhanJamil opened 12 months ago

FarhanJamil commented 12 months ago

The existing configuration file currently retains configuration information, including usernames and passwords, in an unencrypted plain text format, thereby exposing potential security vulnerabilities. To mitigate these risks, the proposal is to implement encryption for the configuration file contents mainly the password.

kyleprice commented 7 months ago

Have you tried implementing this with kubernetes secrets? The config can be changed from a config map to a secret on a k8s cluster.