Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Password specified in clear text in OUD helm values.yaml #93

Open
jayrajput opened this issue Jan 27, 2022 · 0 comments
Open

Password specified in clear text in OUD helm values.yaml #93

jayrajput opened this issue Jan 27, 2022 · 0 comments

Comments

@jayrajput
Copy link

Following steps in https://github.com/oracle/fmw-kubernetes/blob/master/OracleUnifiedDirectory/kubernetes/helm/oud-ds-rs/README.md suggest to specify the rootUserPassword in clearText which our security team has raised concern. Preferred is to let the application use the K8s REST API sent to the API Server to read the password from k8s secret. The mounting of the secret is also considered to be insecure as the password is exposed in the environment variable.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant