Enable password-protected Redis by default #11386
Labels
component:security
enhancement
New feature or request
security
Security related
type:enhancement
type:security
Something is not secure
Summary
Enable password-protected Redis by default.
Motivation
Password-protecting Redis is currently an undocumented feature. Adding password protection provides an additional layer of security to protect cached information (e.g. rendered manifests) from unauthorized access.
Proposal
Randomly generate a password, and store it in a Secret shared by Redis and its clients (application-controller and repo-server if I recall correctly).
The text was updated successfully, but these errors were encountered: