apache / apache/devlake-helm-chart

[Feature Request]: use random passwords by default

Open
#329 4 comments 0 reactions 0 assignees View on GitHub
Dominant language
Go Template
Stars
52
Forks
72
Avg merge
21h 4m
Merged PRs (30d)
1

Description

This helm chart currently deploys a very insecure devlake instance by default: authentication for the UI is disabled, DB passwords are hardcoded while the user is asked to generate the cumbersome encryption key manually which is exported as an env var and lost immediately anyways.

This makes the setup quite vulnerable by so I propose populating all access credentials with random values if they are not explicitly set and have the user retrieve them from the created secret objects if needed. This is already the workflow for Grafana and works just fine.

Specifically:
| Value | Current default | Proposed default |
| --- | --- | --- |
| `lake.encryptionSecret.secret` | manually provided by user | random |
|`mysql.username` | merico | random |
|`mysql.password` | merico| random |
|`ui.basicAuth.enabled` | false | true |
| `ui.basicAuth.password` | - | random |

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.