Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-5414

Provide ability to hide defined annotations in ArgoCD web UI

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Done
    • Icon: Major Major
    • None
    • 4.13
    • GitOps
    • None
    • False
    • None
    • False
    • Not Selected

      1. Proposed title of this feature request

      Gitops is incorrectly showing token information in secrets of type dockerconfig.

      2. What is the nature and description of the request?

      A gitops project that is synchronizing resource definitions that imply secret creation are showing these secrets in the project.
      If one of these secrets is of type "kubernetes.io/dockercfg", while the content is obfuscated, the annotations are not.

      Any secret of type "kubernetes.io/dockercfg" has the annotation "openshift.io/token-secret.value" with the token in clear that can be seen by the administrator of the gitops project and the token could be used to have access to unwanted resources.

      3. Why does the customer need this? (List the business requirements here)

      It's a security leak.

      4. List any affected packages or components.

      Red Hat Gitops operator

              halawren@redhat.com Harriet Lawrence
              rhn-support-gparente German Parente
              Votes:
              0 Vote for this issue
              Watchers:
              3 Start watching this issue

                Created:
                Updated:
                Resolved: