-
Notifications
You must be signed in to change notification settings - Fork 25
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
move credentials to Secret #29
Conversation
ConfigMaps are not intended to hold confidental data. Storing credentials in Secrets instead brings advantages of Encryption at Rest for Secrets and proper RBAC separation.
@filippolmt would you mind taking a look. |
@@ -13,6 +13,7 @@ data: | |||
<!DOCTYPE properties SYSTEM 'http://java.sun.com/dtd/properties.dtd'> | |||
<properties> | |||
<entry key='config.default'>./conf/default.xml</entry> | |||
<entry key='config.useEnvironmentVariables'>true</entry> |
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
@tananaev by adding this configuration in the xml file, is it possible to use environment variables?
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
There was a problem hiding this comment.
Choose a reason for hiding this comment
The reason will be displayed to describe this comment to others. Learn more.
Yes.
As an improvement, I would add the possibility of using an existing secrets in the cluster (of course documenting how to do this) and adding a functionality test. The fact remains that this PR is fine, you could opt to do it at a later date. |
I think that's already covered by traccar-helm/charts/traccar/values.yaml Lines 170 to 184 in ae85446
|
Thank you, I had completely missed it. :) |
@tananaev we can merge the PR |
Thanks |
This touches on my comment in #27 (comment), as ConfigMaps are not intended to hold confidential data.