Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Flux CLI support for parameters from env vars (at least sensitive ones such as password) #2619

Closed
canidam opened this issue Apr 6, 2022 Discussed in #2557 · 1 comment

Comments

@canidam
Copy link
Contributor

canidam commented Apr 6, 2022

Discussed in #2557

Originally posted by canidam March 21, 2022
Bootstrapping flux with git subcommand using credentials requires the user to provide password over CLI.

  # Run bootstrap for a Git repository and authenticate using a password
  flux bootstrap git --url=https://example.com/repository.git --password=<password>

This is a bad pattern. I find it weird flux doesn't support provide credentials over environment variables or from a file.

Couple of problems with such pattern:

  1. Password is kept in history by default (unless user remembers to start with the command with a space)
  2. Other users on the machine can read the password in clear-text with ps -aux

Why does the flux CLI doesn't support variables from the environment? Is that something worth opening a PR for?

@canidam
Copy link
Contributor Author

canidam commented Apr 6, 2022

I use the git provider for bitbucket server, that's why I need it. I'll open PR to align this with the other providers

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant