https://pulumi.com logo
#general
Title
# general
c

cool-egg-852

05/12/2020, 2:36 PM
Any chance https://github.com/pulumi/pulumi-kubernetes/issues/1118 can be given a look at? It’s a bit of a security issue.
b

broad-helmet-79436

05/12/2020, 2:37 PM
if I’m understanding this correctly, it was discussed here https://pulumi-community.slack.com/archives/CRFURDVQB/p1580204949047000
the thread concludes that it’s not a security issue because having access to viewing the labels (describing the secret) implies that you have access to viewing the value (getting the secret)
👍 1
c

cool-egg-852

05/12/2020, 2:40 PM
I see. I’m not sure why it hasn’t been changed though, regardless of if the annotation is encrypted or not.
Having secrets output because you do a describe seems horrible.
b

broad-helmet-79436

05/12/2020, 2:41 PM
I tend to agree 🙂 there was some discussion in https://github.com/pulumi/pulumi-kubernetes/issues/965 which was linked from the thread
if that doesn’t satisfy, I hope we can have a new discussion in the issue you just created 😄
c

cool-egg-852

05/12/2020, 2:43 PM
I just commented on the issue I created with a valid reason for this to be changed
b

broad-helmet-79436

05/12/2020, 2:43 PM
👍 good luck!
c

cool-egg-852

05/12/2020, 2:43 PM
Thanks!
2 Views