KamoCRM

nenosiri pilipili anakuja kutoka k8s siri, kamwe ConfigMap (ID0.5)

FixSecurityService
Shipped
15 Novemba 2026, 01:03 UTC
Author
Kamo
Commit
602e1c6

siri *** (muhimu ***) iliundwa kwa mkono katika namespace kamo na thamani SAME ConfigMap kuishi uliofanyika (sha256 ikilinganishwa, thamani kamwe kuchapishwa). Deployment anasoma ni kupitia secretKeyRef (si ya hiari: pod bila hiyo haiwezi kuanza na pods ya zamani kuendelea kutumikia); ConfigMap na application.yml sasa kusema "$ {***}", na kanuni haina default yoyote zaidi - PasswordEncoderConfig anakataa tupu au 'default-pepper' thamani katika startup, kwa sababu pepper upotovu anakataa kila nenosiri kuhifadhiwa badala ya kushindwa kwa sauti kubwa. literal stale katika deploy / k8s / gen ni scrubbed pia. thamani ya zamani ni bado katika historia git; haiwezi kuzunguka bila invalidating kila nenosiri.

All changes

Like what you see shipping?

All of it arrives in your workspace on its own. Start on the free plan and read this page again in a month.

Start Free ForeverView Pricing