Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

how to store passwords securely #68

Closed
RLutsch opened this issue Sep 1, 2023 · 4 comments · Fixed by #80
Closed

how to store passwords securely #68

RLutsch opened this issue Sep 1, 2023 · 4 comments · Fixed by #80
Assignees
Labels
enhancement New feature or request k8s

Comments

@RLutsch
Copy link

RLutsch commented Sep 1, 2023

the helm chart does not support mounting secrets as env making it hard to manage secrets securely:

Let env allow valueFrom option
Allow more custom detail in the secret option

This will allow secrets to be pulled cross namespace using replicator then mounted as env without having to put the secret in the configmap.

happy to do the pr what the process?

@maxisam
Copy link
Owner

maxisam commented Sep 8, 2023

just submit the PR. I will review it and merge it thx!

@maxisam maxisam added enhancement New feature or request k8s labels Sep 11, 2023
@maxisam
Copy link
Owner

maxisam commented Sep 14, 2023

#80 should help

@maxisam maxisam linked a pull request Sep 14, 2023 that will close this issue
@maxisam maxisam self-assigned this Sep 14, 2023
@dmutterSF
Copy link

Don't know if this is related but I have the plans stored as secrets and don't know how to get mgob to pick them up.
I load the secrets into the container with mountSecrets but mgob only checks the /config directory. I then tried setting the envVar ConfigPath to "/secrets/secretname" but that still gave me the same error message. What am I doing wrong?

Using HelmChart version 1.8.3 and image tag 2.0.18-all

@maxisam
Copy link
Owner

maxisam commented Oct 4, 2023

@dmutterSF in Readme

Load config from environment variables to override config file. syntax: PLAN-ID_KEY_PROPERTY (e.g. mongo-?test_SMTP_SERVER=smtp.company.com)

so you can put your credential in the secret and put your plan in the config now.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request k8s
Projects
None yet
Development

Successfully merging a pull request may close this issue.

3 participants