-
Enhancement
-
Resolution: Won't Do
-
Critical
-
None
-
None
-
None
At the moment the only way for java/maven base S2i templates to access maven repositories requiring authentication is to embed the username/password credentials into the URL for the maven repo.
While this works, it is undesirable as the credentials are not being stored in a secret, and the information is kept in the container even after it has been built.
Can we modify maven based s2i templates to have an optional template parameter that contains the name of a generic secret containing the maven repository login information? This information could be injected into Maven's settings.xml file (and Gradle's settings.gradle file), during the s2i assembly phase so that credential information is correctly stored and treated. This information should be discarded at the end of the build phase.
- relates to
-
OPENJDK-109 Support credentials for maven mirrors
- New