Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Enable password-protected Redis by default #11386

Closed
crenshaw-dev opened this issue Nov 21, 2022 · 1 comment
Closed

Enable password-protected Redis by default #11386

crenshaw-dev opened this issue Nov 21, 2022 · 1 comment
Labels
component:security enhancement New feature or request security Security related type:enhancement type:security Something is not secure

Comments

@crenshaw-dev
Copy link
Member

crenshaw-dev commented Nov 21, 2022

Summary

Enable password-protected Redis by default.

Motivation

Password-protecting Redis is currently an undocumented feature. Adding password protection provides an additional layer of security to protect cached information (e.g. rendered manifests) from unauthorized access.

Proposal

Randomly generate a password, and store it in a Secret shared by Redis and its clients (application-controller and repo-server if I recall correctly).

@crenshaw-dev crenshaw-dev added enhancement New feature or request security Security related labels Nov 21, 2022
@rowanmoul
Copy link

As noted in the above linked issue, this has been completed!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
component:security enhancement New feature or request security Security related type:enhancement type:security Something is not secure
Projects
None yet
Development

No branches or pull requests

3 participants