kubesphere / kubesphere/ks-devops
Request to refine Jenkins password generation using ServiceAccount and Secret
Open
kind/feature
- Dominant language
- Go
- Stars
- 164
- Forks
- 140
- PR merge metrics
- No merged PRs in 30d
Description
Currently, we are using `devops-config`(ConfigMap) to store Jenkins password and JWT secret, which is insecure and trivial.
I request to refine Jenkins password generation using ServiceAccount and Secret.
> https://kubernetes.io/docs/tasks/configure-pod-container/configure-service-account/
/kind feature
Contributor guide
Research direction
Start with the linked Kubernetes ServiceAccount documentation and locate where the current devops-config ConfigMap stores the Jenkins password and JWT secret. Define the required ServiceAccount and Secret flow, then verify that those credentials are no longer stored in the ConfigMap and that Jenkins still receives them correctly.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- kubernetes
- Domain
- devops, infrastructure, security
- Issue type
- Feature
- Difficulty
- 5/5
- Estimated time
- Over a week
- Activity status
- Stale
- Clarity
- Needs clarification
- Newbie friendliness
- 25/100