-
Feature Request
-
Resolution: Done
-
Major
-
None
-
4.13
-
None
-
False
-
None
-
False
-
Not Selected
-
-
-
-
1. Proposed title of this feature request
Gitops is incorrectly showing token information in secrets of type dockerconfig.
2. What is the nature and description of the request?
A gitops project that is synchronizing resource definitions that imply secret creation are showing these secrets in the project.
If one of these secrets is of type "kubernetes.io/dockercfg", while the content is obfuscated, the annotations are not.
Any secret of type "kubernetes.io/dockercfg" has the annotation "openshift.io/token-secret.value" with the token in clear that can be seen by the administrator of the gitops project and the token could be used to have access to unwanted resources.
3. Why does the customer need this? (List the business requirements here)
It's a security leak.
4. List any affected packages or components.
Red Hat Gitops operator
- is caused by
-
GITOPS-4445 Provide ability to hide defined annotations in ArgoCD web UI
- Review
- is related to
-
GITOPS-5903 Include upstream annotation hiding in the operator
- New