You are viewing a plain text version of this content. The canonical link for it is here.

Posted to users@cloudstack.apache.org by Ricardo Pertuz <ri...@kuasar.co.INVALID> on 2023/11/09 00:35:09 UTC

Security Question regarding Kubernetes CSK

Hi,

When I start a Kubernetes cluster using the CS plugin it creates a secret called cloudstack-secret in the namespace kube-system with this

api-url = http://192.168.x.x:8080/client/api
api-key = 2xxxxxxxxxxxx
secret-key = 8xxxxxxxxx
project-id = 2xxxxx

Which belongs to a system user called admin-kubeadmin, my worry is that any user can grap those credentials and modify things for other users, can you please clarify how is it work?, maybe I’m not understanding it well.

Atte,

Ricardo Pertuz