>From a security perspective, I don’t see additional concerns as long as the bootstrap job is explicitly scoped to the intended realms, the bootstrap action is idempotent, and existing bootstrapped realms are not modified.
I’d be supportive of moving this forward. It's a good UX improvement. Happy to continue the discussion and refine the design. Yufei On Wed, Nov 19, 2025 at 10:14 AM Arsenault, Reginald P. <[email protected]> wrote: > UNCLASSIFIED / NON CLASSIFI? > > Hi, I'd like to re-open the topic of adding realm bootstrapping to the > Helm chart. I think it's a good idea to have to be able to quickly set up > polaris in one shot. It's possible to configure the bootstrap job so that > it runs only once upon install of the helm chart, that way you don't > bootstrap an already bootstrapped realm. There would be no way to configure > it so that you accidentally purge the realm, that could remain a manual > thing. What do you think? Are there any security concerns with that? Would > the potential to bootstrap an already bootstrapped realm make it not worth > it? > >
