[
https://issues.apache.org/jira/browse/YUNIKORN-3158?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=18108614#comment-18108614
]
Wilfred Spiegelenburg commented on YUNIKORN-3158:
-------------------------------------------------
The password and username are part of the config for LDAP we do not want to
expose those in a configmap. Secrets are also not encrypted but using different
setups secrets can be pulled from a vault and mounted into pod. That provides a
more secure option than a configmap can provide.
removing target: we need to first establish what we can and cannot do from a
security point of view.
> LDAP resolver should get configuration from the configmap
> ---------------------------------------------------------
>
> Key: YUNIKORN-3158
> URL: https://issues.apache.org/jira/browse/YUNIKORN-3158
> Project: Apache YuniKorn
> Issue Type: Task
> Components: core - scheduler, shim - kubernetes
> Reporter: Peter Bacsko
> Assignee: Peter Bacsko
> Priority: Major
>
> In YUNIKORN-656, we implemented LDAP group resolution. However, processing
> the configuration for the LDAP resolver is different from the rest of
> Yunikorn, that is, it reads a secret separately as a file.
> Rewrite that approach so that the core part gets an update from shim.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
