Add option to pass secrets as files
Nobody has claimed this yet.
Assessment
- Difficulty
- 3/5
- Estimated time
- 1-2 days
- Newbie friendliness
- 35/100
Research direction
Start with the Docker entrypoint and the image README's Docker secrets sections, then trace how COUCHDB_ADMIN_USER and COUCHDB_SECRET are currently read. Support the proposed *_FILE variables and verify that the documented secret-file workflow works without exposing values through ordinary environment variables.
Written by the indexing model from the issue text.
Description
Expected Behavior
I'd like an option to pass secret values as files when appending _FILE after the current environment variable used for the value.
This behavior is consistent with other images such as MySQL, PostgreSQL (see the docker secrets section in the readme files for both).
Related to: https://github.com/apache/couchdb-helm/issues/140
Current Behavior
Currently, the secret values can only be passed through environment variables which can be problematic when benchmark/scanner tools are used, see: https://avd.aquasec.com/compliance/kubernetes/cis-kubernetes-benchmarks-v1.23-1.23/5.4.1/ or bind mounts.
Enabling the _FILE option would allow for a cleaner implementation in the chart and is consistent with other official docker image behavior.
Possible Solution
The docker entry point could be updated to use COUCHDB_ADMIN_USER_FILE, COUCHDB_SECRET_FILE etc environment variables which have the path to a file holding the actual secret value.
- Dominant language
- Dockerfile
- Stars
- 290
- Forks
- 146
- PR merge metrics
- No merged PRs in 30d
Contributor guide
No contributing guide indexed for this repository
First steps
- Read the whole issue, then the project's contributing guide.
- Comment on the issue to say you are picking it up — it saves two people doing the same work.
- Fork the repository and make your change on a branch.
- Open a pull request that references the issue number.
More from apache/couchdb-docker
-
Difficulty 3/5 1-2 days Newbie friendliness 45/100
apache/couchdb-docker#293 ·
-
Docker Setup Issue Open
Difficulty 4/5 3-5 days Newbie friendliness 32/100
apache/couchdb-docker#292 · 5 comments ·
-
Difficulty 3/5 1-2 days Newbie friendliness 48/100
apache/couchdb-docker#288 ·
-
Difficulty 4/5 3-5 days Newbie friendliness 42/100
apache/couchdb-docker#285 ·
-
Difficulty 1/5 Under an hour Newbie friendliness 50/100
apache/couchdb-docker#283 ·
All issues in apache/couchdb-docker
Similar issues
-
kind/bug needs-triage
Difficulty 1/5 Under an hour Newbie friendliness 72/100
matrixorigin/matrixone#29223 ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 84/100
copse-dev/agent-pane#2953 ·
-
bug ci-failure high priority
Difficulty 2/5 1-3 hours Newbie friendliness 74/100
vllm-project/vllm-omni#7972 · 1 comment ·
-
Difficulty 2/5 1-3 hours Newbie friendliness 90/100
simonw/sqlite-utils#872 ·
-
bug good first issue
Difficulty 1/5 Under an hour Newbie friendliness 88/100
amponce/archive-movie-browser#166 ·