search

opensearch-project / helm-charts

:wheel_of_dharma: A community repository for Helm Charts of OpenSearch Project.
https://opensearch.org/docs/latest/opensearch/install/helm/
Apache License 2.0
170 stars 228 forks source link

Referencing a kubernetes secret for the value of OPENSEARCH_INITIAL_ADMIN_PASSWORD extraEnv #522

Open vmm-afonso opened 7 months ago

vmm-afonso commented 7 months ago

Is your feature request related to a problem? Please describe. This is meant to avoid exposing the initial Admin password in the extraEnvs to someone with access to the cluster who's able to see the statefulset yaml

Describe the solution you'd like Something like this:

  - name: OPENSEARCH_INITIAL_ADMIN_PASSWORD
    valueFrom:
      secretKeyRef:
        name: initial-admin-password
        key: password

referencing a key from a secret "initial-admin-password"

dhardy92 commented 6 months ago

What aboutenvFrom: [] :see https://github.com/opensearch-project/helm-charts/blob/main/charts/opensearch/values.yaml#L113C1-L118 ?

prudhvigodithi commented 6 months ago

[Triage] Thanks @dhardy92, @vmm-afonso can you please test with envFrom and see if that works for you?

bianchi2 commented 4 months ago

envFrom works like a charm for me