Skip to content

Revamp the storage of secrets #5052

Open
@andrwng

Description

@andrwng

As we tighten up security for Redpanda, we should consider revisiting the choice to store secret properties alongside regular properties. We've had to step further and further into special-case handling of secret properties for the sake of redaction and serialization. It begs the question whether storing as configs was the right choice.

Longer term, we should think about whether we keep piling onto existing secret property handling (e.g. salting before sending them over Raft and before storage), or do away with storing them with regular properties altogether (e.g. passing environment variables instead).

John left some thoughts here: #5024 (comment)

JIRA Link: CORE-936

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions