status-im
/
consul
mirror of https://github.com/status-im/consul.git
2
0
Fork 0
Code Issues Projects Releases Wiki Activity

Add a security warning about the default Helm chart installation 

If a user installs the default Helm chart Consul on a Kubernetes
cluster that is open to the internet, it is lacking some important
security configurations.
This commit is contained in:
Rebecca Zanzig 2019-01-07 17:46:44 -08:00
parent 62aa40872c
commit 1c70407bd1
2 changed files with 16 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
website/source/docs/platform/k8s/helm.html.md
View File

@ -22,6 +22,14 @@ properly installed and configured with your Kubernetes cluster.
may still change significantly over time. Please always run Helm with may still change significantly over time. Please always run Helm with
`--dry-run` before any install or upgrade to verify changes. `--dry-run` before any install or upgrade to verify changes.
~> **Security Warning:** By default, the chart will install an insecure configuration
of Consul. This provides a less complicated out-of-box experience for new users,
but is not appropriate for a production setup. It is highly recommended to use
a properly secured Kubernetes cluster or make sure that you understand and enable
the [recommended security features](/docs/internals/security.html.md). Currently,
some of these features are not supported in the Helm chart and require additional
manual configuration.
## Using the Helm Chart ## Using the Helm Chart
To use the Helm chart, you must download or clone the To use the Helm chart, you must download or clone the

8
website/source/docs/platform/k8s/run.html.md
View File

@ -35,6 +35,14 @@ cluster with sane defaults out of the box. Prior to going to production,
it is highly recommended that you it is highly recommended that you
[learn about the configuration options](/docs/platform/k8s/helm.html#configuration-values-). [learn about the configuration options](/docs/platform/k8s/helm.html#configuration-values-).
~> **Security Warning:** By default, the chart will install an insecure configuration
of Consul. This provides a less complicated out-of-box experience for new users,
but is not appropriate for a production setup. It is highly recommended to use
a properly secured Kubernetes cluster or make sure that you understand and enable
the [recommended security features](/docs/internals/security.html.md). Currently,
some of these features are not supported in the Helm chart and require additional
manual configuration.
## How-To ## How-To
### Installing Consul ### Installing Consul