17 Apr
2025
17 Apr
'25
2:49 a.m.
Hi StarlingX community, Someone reached out on the info email for the project to raise a concern about exposed credentials in the starlingx-staging repo in the jenkins folder. The person listed a few items that might be of a concern to be stored in the public repository: * base64-encoded client certificates and private keys * Cluster configurations referring to kubernetes-admin access * Kubernetes API endpoints While these are likely out of concern due to describing a test environment, but I wanted to share the concern if it might still be helpful to look into. Best Regards, Ildikó ——— Ildikó Váncsa Director of Community Open Infrastructure Foundation