oblakstudio / redisinsight

RedisInsight v2 - Better GUI for Redis (amd64/arm64)
https://hub.docker.com/r/oblakstudio/redisinsight
Other
65 stars 7 forks source link

Enable Encrypt sensitive information #12

Closed micgruber closed 11 months ago

micgruber commented 11 months ago

When starting the first time I'm not able to select Encrypt sensitive information. Do I have to do any additional steps to make it work. Found no information in the docs. Deployed it in kubernetes with this config.

config


---
apiVersion: v1
kind: PersistentVolumeClaim
metadata:
  name: redisinsight-pv-claim
  namespace: namespace
  labels:
    app: redisinsight
spec:
  accessModes:
    - ReadWriteOnce
  resources:
    requests:
      storage: 1Gi
---
apiVersion: apps/v1
kind: Deployment
metadata:
  name: redisinsight
  namespace: namespace
  labels:
    app: redisinsight
spec:
  replicas: 1
  selector:
    matchLabels:
      app: redisinsight
  template:
    metadata:
      labels:
        app: redisinsight
    spec:
      containers:
        - name:  redisinsight
          image: oblakstudio/redisinsight:latest
          imagePullPolicy: IfNotPresent
          securityContext:
            runAsUser: 0
          ports:
            - containerPort: 5000
              protocol: TCP
---
seebeen commented 11 months ago

Hello,

Please read issue #2 .

Encrypting sensitive information shouldn't be important in the docker / kuberenets cluster, and by enabling encryption you actually reduce security because you need to run the app within container as root and container itself needs IPC_LOCK cap.