Uploaded image for project: 'OpenShift Request For Enhancement'
  1. OpenShift Request For Enhancement
  2. RFE-7499

Automatically hide annotations defined in the ArgoCD web UI

XMLWordPrintable

    • Icon: Feature Request Feature Request
    • Resolution: Unresolved
    • Icon: Undefined Undefined
    • None
    • None
    • GitOps
    • None
    • None
    • Product / Portfolio Work
    • None
    • False
    • Hide

      None

      Show
      None
    • None
    • None
    • None
    • None
    • None
    • None
    • None
    • None

      1. Proposed title of this feature request
      2. What is the nature and description of the request?

      RFE-5414 was created to request the ability to hide defined annotations in ArgoCD web UI, a new resource.sensitive.mask.annotations key has been introduced, which accepts a comma-separated list of metadata.annotations keys whose values will be masked in the UI and CLI. 

      Any secret of type "kubernetes.io/dockercfg" has the annotation "openshift.io/token-secret.value" with the token in clear that can be seen by the administrator of the gitops project and the token could be used to have access to unwanted resources, these secrets should be automatically hidden instead of requiring manual addition.

      3. Why does the customer need this? (List the business requirements here)

      It's a security leak.

      4. List any affected packages or components.

      Red Hat Gitops operator.

              halawren@redhat.com Harriet Lawrence
              rhn-support-malonso Maria Del Mar Alonso
              None
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

                Created:
                Updated:
                None
                None