The ONAP security sub-team is actively discussing the entire password issue.
But they will be looking at it from the overall-ONAP point of view, and not
specifically component dockers.
Tony Hansen
On 8/2/17, 9:05 AM, "[email protected] on behalf of LOTT,
CHRISTOPHER" <[email protected] on behalf of
[email protected]> wrote:
How do you all handle passwords when building your component dockers?
To build our apps and create our docker containers we have to specify
passwords, for example to our database. Today we put the passwords in our
build scripts, which are committed in git and exposed to the world. Our
database docker is running in rackspace and also open to the wild internets, so
I think this situation does not pass the red-face test.
I noticed that in initializing our virtual machine the LF environment
scripts use data stored in "/opt/config/*" files for nexus username and nexus
password. That seems like a step in the right direction.
Is something similar possible for components? If this is a solved problem
please point me to the issue, email archive, etc. and I'll read up.
Possibly also relevant - I hear installations will soon be done by ONAP
Operation Manager (?).
Thanks in advance.
_______________________________________________
onap-discuss mailing list
[email protected]
https://lists.onap.org/mailman/listinfo/onap-discuss
