Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Create Postgres superuser password randomly in security mode #5050

Open
lindseysimple opened this issue Jan 13, 2025 · 0 comments · May be fixed by #5051
Open

Create Postgres superuser password randomly in security mode #5050

lindseysimple opened this issue Jan 13, 2025 · 0 comments · May be fixed by #5051
Assignees
Labels
enhancement New feature or request

Comments

@lindseysimple
Copy link
Contributor

🚀 Feature Request

Relevant Package [REQUIRED]

This feature request is for all EdgeX using Postgres database in security mode.

Description [REQUIRED]

Currently the superuser password for Postgres is defined directly in the docker compose file by the POSTGRES_PASSWORD environment variable.

For security concern, the superuser password should not be exposed in the compose file and should be saved in the secret store.

Describe the solution you'd like

A superuser password for Postgres will be generated randomly by the secretstore-setup service if the database is initialized for the first time and will be saved to the secret store; otherwise, the superuser password for Postgres will be retrieved from the secret store.

@lindseysimple lindseysimple added the enhancement New feature or request label Jan 13, 2025
@lindseysimple lindseysimple self-assigned this Jan 13, 2025
@github-project-automation github-project-automation bot moved this to New Issues in Technical WG Jan 13, 2025
@lindseysimple lindseysimple moved this from New Issues to In Progress in Technical WG Jan 13, 2025
lindseysimple added a commit to lindseysimple/edgex-go that referenced this issue Jan 13, 2025
Resolves edgexfoundry#5050. Save postgres superuser password in secretstore.

Signed-off-by: Lindsey Cheng <[email protected]>
@lindseysimple lindseysimple linked a pull request Jan 13, 2025 that will close this issue
5 tasks
lindseysimple added a commit to lindseysimple/edgex-go that referenced this issue Jan 14, 2025
Resolves edgexfoundry#5050. Save postgres superuser password in secretstore.

Signed-off-by: Lindsey Cheng <[email protected]>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
enhancement New feature or request
Projects
Status: In Progress
Development

Successfully merging a pull request may close this issue.

1 participant