apache / apache/couchdb-helm

adminHash does not work as a secret

Open
#183 1 comment 0 reactions 0 assignees View on GitHub
Dominant language
Mustache
Stars
55
Forks
68
PR merge metrics
No merged PRs in 30d

Description

We are experiencing the issue described here running chart version 4.5.6

https://github.com/apache/couchdb/issues/4590

When a pod restarts, the admin password hash is recalculated with a random salt and this seems to affect session cookies
when using the Fauxton UI.

The suggested resolution is to specify adminHash in the values, however according to the comments in values.yaml, this is not considered secure.

We attempted to define adminHash in our preconfigured secret which also contains adminPassword, but it seems that adminHash is not read from the secret. The statefulset.yaml template only reads adminHash from Values.

I am requesting that adminHash as a secret (like adminPassword) be implemented.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.