External Secrets readable in all Namespaces - Githubissues

superluminar-io / super-eks

super-eks is a CDK construct that provides a preconfigured EKS installation with batteries included.

Apache License 2.0

44 stars 4 forks source link

External Secrets readable in all Namespaces #379

Closed skomp closed 2 years ago

skomp commented 2 years ago

External secrets can be read from all namespaces.

Reproduction Steps

Create a namespace a and an external secret x in the namespace. Get the secret and it will be readable.

What did you expect to happen?

The secret is not readable unless explicitly allowed.

What actually happened?

The secret is readable by default in all namespaces

Environment

CDK CLI Version : 1.134.0
Version: 0.2.12
Node.js Version: 16.13.0
OS: MacOS 12.0.1
Language (Version): 4.4.3

This is a :bug: Bug Report

github-actions[bot] commented 2 years ago

This issue is now marked as stale because it hasn't seen activity for a while. Add a comment or it will be closed soon.