hyperledger-labs / hyperledger-labs/fabric-operator
Store CA configuration as secret
- Dominant language
- Go
- Stars
- 78
- Forks
- 47
- Avg merge
- 1h 24m
- Merged PRs (30d)
- 3
Description
Access to the CA configuration allows users to see the usernames and passwords of all identities within the CA, specifically the bootstrap admin identity. While it is necessary to store the secret data for things like the peer within the ibppeer CRD itself, storing secret data in a configmap reduces the ability to create a "read" type configuration on a cluster where this operator is deployed.
Could this be a configurable aspect of the operator? the CM is already set to binaryData, so it could be easily modified to a secret
Contributor guide
Research direction
Locate the Go code that creates the CA ConfigMap and the ibppeer CRD handling; start by tracing how CA configuration is assembled and stored in binaryData. Define the configuration choice and verify that secret data is stored in a Secret when selected, while required peer data remains in the CRD.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- go, kubernetes
- Domain
- devops, infrastructure, security
- Issue type
- Feature
- Difficulty
- 4/5
- Estimated time
- 3-5 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 42/100