Bug 1678571 - Secrets encrypted for openshift online
Summary: Secrets encrypted for openshift online
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: OpenShift Online
Classification: Red Hat
Component: Documentation
Version: 3.x
Hardware: All
OS: All
unspecified
high
Target Milestone: ---
: ---
Assignee: Ashley Hardin
QA Contact: Vikram Goyal
Vikram Goyal
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-02-19 06:21 UTC by Jatan Malde
Modified: 2019-02-26 18:38 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-02-26 18:38:07 UTC
Target Upstream Version:
Embargoed:


Attachments (Terms of Use)

Description Jatan Malde 2019-02-19 06:21:59 UTC
Document URL: 

https://docs.openshift.com/online/architecture/index.html#arch-index-how-is-it-secured

Section Number and Name: 

How Is OpenShift Online Secured?

Describe the issue: 

The above section does not includes encryption for secrets which is seen in Openshift 3.11 docs. 

https://docs.openshift.com/container-platform/3.11/admin_guide/encrypting_data.html#encrypting-data-process

Suggestions for improvement: 

Our Openshift online hosting is currently on Openshift 3.11, so if the secrets could be encrypted as mentioned in the above section, the same changes should be added to our Openshift Online documentation. 

Additional information:

Comment 2 Abhishek Gupta 2019-02-21 21:30:11 UTC
This configuration and encryption is something that Ops would do and would apply for all application secrets. So, we'll need to determine if ops is encrypting user application secrets in Online and, if so, highlight that in our documentation of how we secure Online.

Comment 3 Vikram Goyal 2019-02-22 05:22:57 UTC
(In reply to Abhishek Gupta from comment #2)
> This configuration and encryption is something that Ops would do and would
> apply for all application secrets. So, we'll need to determine if ops is
> encrypting user application secrets in Online and, if so, highlight that in
> our documentation of how we secure Online.

Abhishek, so did you want me to assign this bug to you for the moment?

Comment 4 Ashley Hardin 2019-02-26 18:38:07 UTC
I confirmed with our Ops team that this is still experimental. We haven't enabled this in our Online environments, but I will check to see if this is planned for a future release. With that said, no documentation updates are needed at this time.

With that said, I am closing this bug for now.


Note You need to log in before you can comment on or make changes to this bug.