matrix-org / matrix-org/matrix-hookshot
Kubernetes: Helm registration.yml from Secret
Open
Nobody has claimed this yet.
- Dominant language
- TypeScript
- Stars
- 450
- Forks
- 95
- Avg merge
- 1d 2h
- Merged PRs (30d)
- 23
Description
The `registration.yml` (at least the `as_token` and `hs_token`) should come from a Kubernetes Secret instead of a ConfigMap as it contains secret values.
Contributor guide
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
Research direction
Start by locating the Helm chart resources that provide registration.yml and inspect how the ConfigMap is consumed. Change the deployment configuration so the secret values come from a Kubernetes Secret, then verify that at least as_token and hs_token are no longer supplied through a ConfigMap.
Written by the indexing model from the issue text.
Assessment
- Tech stack
- helm, kubernetes
- Domain
- infrastructure, security
- Issue type
- Feature
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Activity status
- Stale
- Clarity
- Mostly clear
- Newbie friendliness
- 35/100