place-labs / k8s-helm

Helm charts for PlaceOS on Kubernetes
0 stars 2 forks source link

Add support for PRODUCTION environment (not just development) #20

Open w-le opened 3 years ago

w-le commented 3 years ago

Currently all clusters will be deployed in development mode, which is insecure as it will use public secret stored in each service's git repo.

There should be a global value to specify whether to deploy the new cluster in development or production mode.

When in production mode, new JWT secret and public keys should be generated and stored as k8s secrets and shared to each relevant pod (which I think are api/staff, maybe core? someone from Product team will be able to confirm which services needs which env vars when in PRODUCTION mode)

In production mode there should be 0 "default" passwords, e.g. initial backoffice password should be randomly generated.

viv-4 commented 1 year ago