How do you all handle passwords when building your component dockers? To build our apps and create our docker containers we have to specify passwords, for example to our database. Today we put the passwords in our build scripts, which are committed in git and exposed to the world. Our database docker is running in rackspace and also open to the wild internets, so I think this situation does not pass the red-face test.
I noticed that in initializing our virtual machine the LF environment scripts use data stored in "/opt/config/*" files for nexus username and nexus password. That seems like a step in the right direction. Is something similar possible for components? If this is a solved problem please point me to the issue, email archive, etc. and I'll read up. Possibly also relevant - I hear installations will soon be done by ONAP Operation Manager (?). Thanks in advance. _______________________________________________ onap-discuss mailing list [email protected] https://lists.onap.org/mailman/listinfo/onap-discuss
