Ticket 35: Securing Backend Repo - Githubissues

markcdev101 / spring-flavour-vault-backend

Repository for backend code for Flavour Vault

0 stars 0 forks source link

Ticket 35: Securing Backend Repo #33

Closed markcdev101 closed 2 weeks ago

markcdev101 commented 2 weeks ago

Description: Secure Backend repo by protecting passwords in configuration file.

Spring Boot Concepts:

Kubernetes Secrets
Separating Local and Kubenetes Configurations

Guide:

Protect passwords in configuration files by using Kubernetes Secrets. Refer to environment variables i.e. username: ${DB_USERNAME}
use application.yaml for local development and application-dev.yaml for Cloud/K8s deployment
Adding application.yaml in gitignore

Acceptance Criteria:

[x] Credentials in application-{env}.yaml will be using environment variables.
[x] Add application.yaml in gitignore
[x] application-dev.yaml and application.yaml should be nearly identical.

markcdev101 commented 2 weeks ago

For adding to gitignore and removing from Git repository

echo "application.yaml" >> .gitignore cd to /resources git rm --cached application.yml git add . git commit -m 'Removed application.yml from tracking and add to gitinore' git push