wballard / starphleet

19 stars 37 forks source link

Secure by default #285

Closed squince closed 8 years ago

squince commented 8 years ago

Starphleet enables securing individual containers by explicitly including one of .ldap, .jwt, or .htpasswd files along side the orders file in the headquarters. Be default, it does not secure any container missing all of those files.

We should flip this so that all containers are by default secured using .ldap and only if explicitly configured otherwise is a container insecure.