- Ya
- 11 Agosti 2026, 03:44 UTC
- Mwandishi
- Kamo
- Ahadi ya
- 419f66b
The platform's shared password was baked in as the fallback for DB_PASSWORD and MINIO_ROOT_PASSWORD, so it lived in this repo and in the built image as well as in the cluster manifests. Production never used the DB default — *** supplies DB_PASSWORD through envFrom, and its value is a different password. The MinIO default WAS being used: no deployment set MINIO_ROOT_PASSWORD, so every service was authenticating to object storage with the literal in this file. A minio-app-credentials secret now supplies it via envFrom, wired and verified before these defaults were removed. Removing the fallbacks means a missing variable now fails loudly at startup rather than silently authenticating with a password that is in a git repo.