Allowing users to pass in Sensitive Information
Opened this issue · 0 comments
jacobmammoliti commented
This Helm chart allows users to pass in a TLS key along with other sensitive information as Helm values. Giving users this ability is strongly not recommended. Users should be encouraged to create secrets outside of the Helm chart and then reference them by name within it. Both the Vault and Consul Helm charts do this and also do not allow users to pass in potentially sensitive information.
Allowing users to define Kubernetes secrets with data in a Helm chart is not a good practice.