Page MenuHomePhabricator

[terraform] Avoid including Terraform *.tfstate.backup in keyserver docker images
ClosedPublic

Authored by will on Jul 22 2024, 5:55 PM.
Tags
None
Referenced Files
Unknown Object (File)
Tue, Dec 10, 7:42 PM
Unknown Object (File)
Thu, Nov 28, 4:04 PM
Unknown Object (File)
Tue, Nov 26, 11:10 AM
Unknown Object (File)
Nov 22 2024, 3:44 PM
Unknown Object (File)
Nov 1 2024, 10:45 AM
Unknown Object (File)
Nov 1 2024, 10:45 AM
Unknown Object (File)
Nov 1 2024, 10:45 AM
Unknown Object (File)
Nov 1 2024, 10:44 AM
Subscribers

Details

Summary

Files like terraform.tfstate.backup expose secrets in the keyserver image and should be

Test Plan

Tested by building the docker image, opening the build with docker run -it docker_image bash and
searching for my password cd .. && (grep -R password_string . | grep -v node_modules) as we did in https://phab.comm.dev/D12823

Diff Detail

Repository
rCOMM Comm
Lint
Lint Not Applicable
Unit
Tests Not Applicable