- Shipped
- August 11, 2026 at 3:44 AM UTC
- Author
- Kamo
- Commit
- 8a0842a
The platform's shared password was baked in as the fallback for DB_PASSWORD and MINIO_ROOT_PASSWORD, so it lived in this repo and in the built image as well as in the cluster manifests. Production never used the DB default — *** supplies DB_PASSWORD through envFrom, and its value is a different password. The MinIO default WAS being used: no deployment set MINIO_ROOT_PASSWORD, so every service was authenticating to object storage with the literal in this file. A minio-app-credentials secret now supplies it via envFrom, wired and verified before these defaults were removed. Removing the fallbacks means a missing variable now fails loudly at startup rather than silently authenticating with a password that is in a git repo.