Bug 1400841

Summary: RFE: Encrypt secret data rather than base64 encode
Product: OpenShift Container Platform Reporter: Kenjiro Nakayama <knakayam>
Component: RFEAssignee: Derek Carr <decarr>
Status: CLOSED CURRENTRELEASE QA Contact: Xiaoli Tian <xtian>
Severity: medium Docs Contact:
Priority: unspecified    
Version: 3.3.0CC: aos-bugs, erich, gkf42, jfenal, jialiu, jliggitt, jokerman, jpazdziora, lmeyer, mmccomas, stwalter
Target Milestone: ---   
Target Release: 3.7.0   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: Doc Type: If docs needed, set a value
Doc Text:
Story Points: ---
Clone Of: Environment:
Last Closed: 2017-10-04 21:36:16 UTC Type: Bug
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:

Description Kenjiro Nakayama 2016-12-02 08:19:19 UTC 
1. Proposed title of this feature request

  RFE: Encrypt secret data rather than base64 encode

3. What is the nature and description of the request?

  Currently OpenShift secret values are encoded by base64. Since they can be decoded easily, we need some way to encrypt the secret data.

4. Why does the customer need this? (List the business requirements here)

  One of the customers want to run payment applications on OpenShift and they don't want to protect database passwords strictly.

7. Is there already an existing RFE upstream or in Red Hat Bugzilla?

  No, there are some requests like using vault, but there are no concrete way to use them on OpenShift.

8. Does the customer have any specific timeline dependencies and which release would they like to target (i.e. RHEL5, RHEL6)?

  The customer requested 1Q 2017.
Comment 3 Steven Walter 2017-10-04 21:36:16 UTC 
This is solved by: https://docs.openshift.com/container-platform/3.6/admin_guide/encrypting_data.html