Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update the zarf registry to not use an env variable secret to satisfy pointless DoD STIG V-242415 😭 #457

Closed
jeff-mccoy opened this issue Apr 23, 2022 · 6 comments · Fixed by #473
Closed

Update the zarf registry to not use an env variable secret to satisfy pointless DoD STIG V-242415 😭 #457

jeff-mccoy opened this issue Apr 23, 2022 · 6 comments · Fixed by #473
Assignees
@YrrepNoj

Comments

@jeff-mccoy
Copy link
Contributor

A DoD STIG forbids the use of "env variable secrets" because they are "bad". This issue focuses specifically on how we can address that concern for the Zarf Registry. https://stigviewer.com/stig/kubernetes/2021-04-14/finding/V-242415

Also.. 😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭😭
@RothAndrew RothAndrew moved this to New Requests in Zarf Project Board Apr 23, 2022
@unicornbunny182
Copy link
Contributor

👀

@jeff-mccoy
Copy link
Contributor Author

@YrrepNoj haSharedSecret here: https://github.com/defenseunicorns/docker-registry.helm#configuration

@jeff-mccoy
Copy link
Contributor Author

REGISTRY_HTTP_SECRET

@jeff-mccoy
Copy link
Contributor Author

https://github.com/defenseunicorns/docker-registry.helm/blob/main/templates/deployment.yaml#L92

@jeff-mccoy
Copy link
Contributor Author

https://github.com/defenseunicorns/docker-registry.helm/blob/main/templates/secret.yaml#L16

@jeff-mccoy
Copy link
Contributor Author

https://docs.docker.com/registry/configuration/#/http, secret: asecretforlocaldevelopment

@jeff-mccoy jeff-mccoy mentioned this issue May 3, 2022
Merged
1 task
Repository owner moved this from New Requests to Done in Zarf Project Board May 4, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@YrrepNoj YrrepNoj

Labels
None yet
Projects
None yet
Milestone
No milestone
Development

Successfully merging a pull request may close this issue.

Resolve env variable secrets in the docker registry helm chart zarf-dev/zarf
3 participants
@jeff-mccoy @YrrepNoj @unicornbunny182