Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[FEATURE]: CSM Authorization encryption for secrets in K3S #774

Closed
bharathsreekanth opened this issue Apr 24, 2023 · 0 comments
Closed

[FEATURE]: CSM Authorization encryption for secrets in K3S #774

bharathsreekanth opened this issue Apr 24, 2023 · 0 comments
Assignees
@bharathsreekanth
Labels
area/csm-authorization Issue pertains to the CSM Authorization module type/feature A feature. This label is applied to a feature issues.
Milestone
v1.7.0

Comments

@bharathsreekanth
Copy link
Contributor

Describe the solution you'd like
Secrets need to be encrypted in CSM authorization proxy environment. Currently, secrets are not stored encrypted and it is a security risk that was made aware by several users. The authorization proxy currently uses K3S based solution, so this ask is for secrets to be encrypted in K3S.

Describe alternatives you've considered
Alternate solution is to make this defacto when Authorization proxy has been rearchitected.

Additional context
Reading through the documentation it appears that K3S only supports AES-CBC keys for encryption by default
Excerpts from the K3S doc:
Key Type: All keys using this tool are AES-CBC type. See more info here.
@bharathsreekanth bharathsreekanth added the type/feature-request New feature request. This is the default label associated with a feature request issue. label Apr 24, 2023
@bharathsreekanth bharathsreekanth added this to the v1.7.0 milestone Apr 24, 2023
@bharathsreekanth bharathsreekanth self-assigned this Apr 24, 2023
This was referenced Apr 24, 2023
Merged
Merged
@shaynafinocchiaro shaynafinocchiaro added type/feature A feature. This label is applied to a feature issues. area/csm-authorization Issue pertains to the CSM Authorization module and removed type/feature-request New feature request. This is the default label associated with a feature request issue. labels Apr 26, 2023
@shaynafinocchiaro shaynafinocchiaro changed the title [FEATURE]: Encryption for secrets in K3S [FEATURE]: CSM Authorization encryption for secrets in K3S Apr 26, 2023
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees

@bharathsreekanth bharathsreekanth

Labels
area/csm-authorization Issue pertains to the CSM Authorization module type/feature A feature. This label is applied to a feature issues.
Projects
None yet
Milestone
v1.7.0
Development

No branches or pull requests
2 participants
@shaynafinocchiaro @bharathsreekanth