UNCLASSIFIED - NO CUI

Skip to content

Secrets, Passwords and Licenses present in inline values of HelmRelease resources

Upstream anchore chart accepts the database password as a value in the values file instead of an existing secret.

https://repo1.dso.mil/platform-one/big-bang/bigbang/-/blob/master/chart/templates/anchore/anchore-helmrelease.yaml#L64

solution should be to have bigbang create a secret with the creds, and tell the HelmRelease to source it's values from said secret

Edited by blake.burkhart