Uploaded image for project: 'Data Management'
  1. Data Management
  2. DM-1476

Secure MySQL root password

    XMLWordPrintable

    Details

    • Type: Story
    • Status: Done
    • Resolution: Done
    • Fix Version/s: None
    • Component/s: Qserv
    • Labels:
      None
    • Story Points:
      4
    • Epic Link:
    • Sprint:
      DB_S19_02, DB_S19_03, DB_S19_04, DB_S19_05
    • Team:
      Data Access and Database

      Description

      MySQL password in written in multiple file during configuration procedure.
      One single file (QSERV_RUN_DIR/tmp/my.cnf) should be used, and removed at the end of configuration procedure. qserv-meta.conf also contains MySQL password and should be also secured (move password to qserv-configure.py cmd line?).

        Attachments

          Issue Links

          is blocked by

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. DM-17835 Improve qserv_deploy configuration

          • Done
          mentioned in

          Page Loading...

            Activity

            Ascending order - Click to sort in descending order
            Hide
            Permalink
            fritzm Fritz Mueller added a comment -

            Still an issue. Work on this was deferred until Kubernetification of Qserv.

            All usages of the mysql root password should be updated to be environment variable based, instead of relying on configuration-time template substitutions. In the Kubernetes environment, this environment variable should be injected into the Qserv containers via a Kubernetes Secret.

            Show
            fritzm Fritz Mueller added a comment - Still an issue. Work on this was deferred until Kubernetification of Qserv. All usages of the mysql root password should be updated to be environment variable based, instead of relying on configuration-time template substitutions. In the Kubernetes environment, this environment variable should be injected into the Qserv containers via a Kubernetes Secret.
            Hide
            Permalink
            jammes Fabrice Jammes added a comment -

            Hi Fritz Mueller, on my side I'm waiting for these review since a few weeks, so I'll merge it by next thursday if review is not done yet.

            Show
            jammes Fabrice Jammes added a comment - Hi Fritz Mueller , on my side I'm waiting for these review since a few weeks, so I'll merge it by next thursday if review is not done yet.

              People

              Assignee:
              jammes Fabrice Jammes
              Reporter:
              jammes Fabrice Jammes
              Reviewers:
              Christine Banek
              Watchers:
              Andy Salnikov, Christine Banek, Fabrice Jammes, Fritz Mueller
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

                Dates

                Created:
                Updated:
                Resolved:

                  Jenkins

                  No builds found.