julz / cube

a kube backend for cf, because k-why not
21 stars 8 forks source link

Recipe: Security of admin user/password #15

Open herrjulz opened 6 years ago

herrjulz commented 6 years ago

The download of app-bits requires auth. Therefor, the admin user and password are provided as environment variables to the staging jobs on kubernetes. You can lookup the env vars in kubectl describe job, which is very insecure.

The recipe should retrieve credentials from a vault or the like.