search

odpi / egeria-samples

various samples that can be useful either for learning or as initial starting points for working with Egeria
Apache License 2.0
13 stars 8 forks source link

Security: ibmigc.username and ibmigc.password #4

Closed zoranid closed 3 years ago

zoranid commented 4 years ago

When using external IBM IGC user needs to supply ibmigc.username and ibmigc.password in values.yaml. This is a security issue because once configmap is deployed somebody can use e.g. kubectl get configmap gaudy-dragon-odpi-egeria-vdc-configmap -o yaml --export and obtain ibmigc username and password. Preferably, ibmigc.username and ibmigc.password should be made a k8s secret.

planetf1 commented 4 years ago

Note odpi/egeria#569 also reports the same for atlas.

Entirely agree with problem & solution

planetf1 commented 3 years ago

The VDC environment will need significant re-work to adapt to the many changes made in Egeria to better support metadata integration. Additionally the helm charts used for the lab & a simple base config have evolved to better support different types of services, exposing of ports, persistent storage etc.

As such specific incremental changes to the current - now old - charts do not really add value.

As such closing for now