Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

cluster.yml playbook shows certificate key and the token when running kubeadm command which is a security issue #11099

Open
sakshiarora13 opened this issue Apr 19, 2024 · 0 comments
Labels
kind/bug Categorizes issue or PR as related to a bug.

Comments

@sakshiarora13
Copy link

What happened?

When executing cluster.yml playbook, at task:
image

control-plane certificate-key and tokens are displayed.
image

This is a security concern and there should be some way to hide this detail.

What did you expect to happen?

private keys and tokens should not be displayed on the screen.

How can we reproduce it (as minimally and precisely as possible)?

execute cluster.yml

OS

Ubuntu: 22.04

Version of Ansible

ansible [core 2.14.14]

Version of Python

3.9.16

Version of Kubespray (commit)

10679eb

Network plugin used

calico

Full inventory with variables

kube_version: "v1.26.12"
container_manager: "containerd"
dashboard_enabled: true
helm_enabled: true
kube_network_plugin: "calico"
metallb_enabled: true
metallb_speaker_enabled: true
kube_proxy_strict_arp: true
kube_proxy_mode: 'iptables'
override_system_hostname: false
populate_inventory_to_hosts_file: false
enable_nodelocaldns: false
unsafe_show_logs: true

Command used to invoke ansible

invoked via collection

Output of ansible run

completed with success

Anything else we need to know

No response

@sakshiarora13 sakshiarora13 added the kind/bug Categorizes issue or PR as related to a bug. label Apr 19, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
kind/bug Categorizes issue or PR as related to a bug.
Projects
None yet
Development

No branches or pull requests

1 participant