Red Hat Bugzilla – Bug 1503289
Registry credentials are displayed in plain text in configmap for ASB
Last modified: 2018-03-08 02:29:22 EST
Description of problem: The configmap for ASB includes dockerhub credentials in plaintext. We should break out the credentials into a separate secret. Version-Release number of selected component (if applicable): 3.7.0 How reproducible: 100% Steps to Reproduce: 1. Deploy Ansible service broker 2. Look at the ASB configmap [dymurray@dymurray ansible-service-broker]$ oc get configmap broker-config -o yaml | grep pass Actual results: Password in plain text Expected results: Password is not stored there and kept in a secret
https://github.com/openshift/ansible-service-broker/pull/502
Fixed. Verified on openshift v3.7.0-0.190.0 # oc get configmap broker-config -o yaml | grep pass No credentials are displayed in plain text in configmap for ASB now.
https://github.com/openshift/openshift-ansible/pull/6009 Associated downstream PR.
Since the problem described in this bug report should be resolved in a recent advisory, it has been closed with a resolution of ERRATA. For information on the advisory, and where to find the updated files, follow the link below. If the solution does not work for you, open a new bug report. https://access.redhat.com/errata/RHSA-2017:3188