Comment 0 for bug 1782730

Revision history for this message
Ignacio Dominguez Martinez-Casanueva (idomingu) wrote :

Currently, Contrail's admin password is configured as the environment variable 'KEYSTONE_AUTH_ADMIN_PASSWORD', which provided using a ConfigMap in the Helm charts.

In order to improve security in a Helm-based deployment, I suggest moving 'KEYSTONE_AUTH_ADMIN_PASSWORD' environment variable out of the ConfigMap to a Kubernetes Secret.