[JIRA] (JENKINS-58743) Remove need to store master key in filesystem

[msic...@cloudbees.com (JIRA)]

Title: Message Title

Matt Sicker updated an issue   Jenkins / JENKINS-58743 Remove need to store master key in filesystem Change By: Matt Sicker The existing implementation of ConfidentialStore in Jenkins relies on a secret key that is stored inside {{JENKINS_HOME/secrets/master.key}} which is used for encrypting the keys used to encrypt various other secrets. This key file is really only required during startup as the key is loaded into memory and used for unlocking the confidential store which allows for encrypting and decrypting data elsewhere in Jenkins. This can potentially be improved in a couple ways: # Add a CLI option or environment variable to specify the location of the master key file. This would make it simpler to locate it on removable file system or secret mount. # Provide an unlock prompt similar to the admin password for uploading or specifying the master key on startup if there is no master key available to decrypt the confidential store. Add Comment   This message was sent by Atlassian Jira (v7.13.12#713012-sha1:6e07c38) -- You received this message because you are subscribed to the Google Groups "Jenkins Issues" group. To unsubscribe from this group and stop receiving emails from it, send an email to jenkinsci-issues+unsubscr...@googlegroups.com. To view this discussion on the web visit https://groups.google.com/d/msgid/jenkinsci-issues/JIRA.201045.1564603494000.5886.1583359560172%40Atlassian.JIRA.