luxolus
/
open-consul
2
0
Fork 0
Code Issues 1 Pull Requests Packages Releases Wiki Activity

[docs] security warning about Helm chart (#5561) 

* [docs] security warning about Helm chart

Correct security warning about helm chart to caution about default Consul install.

* clarify that k8s or consul should be secure
This commit is contained in:
Judith Malnick 2019-04-04 16:58:57 -07:00 committed by GitHub
parent 8068372ceb
commit f27905dc62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 8 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

17
website/source/docs/platform/k8s/helm.html.md
View File

@ -22,13 +22,14 @@ properly installed and configured with your Kubernetes cluster.
may still change significantly over time. Please always run Helm with
`--dry-run` before any install or upgrade to verify changes.
~> **Security Warning:** By default, the chart will install an insecure configuration
of Consul. This provides a less complicated out-of-box experience for new users,
but is not appropriate for a production setup. It is highly recommended to use
a properly secured Kubernetes cluster or make sure that you understand and enable
the [recommended security features](/docs/internals/security.html). Currently,
some of these features are not supported in the Helm chart and require additional
manual configuration.
~> **Security Warning:** By default, the chart will install an insecure
configuration of Consul. This provides a less complicated out-of-box experience
for new users, but is not appropriate for a production setup. Make sure that
your Kubernetes cluster is properly secured to prevent unwanted access to
Consul, or that you understand and enable the
[recommended Consul security features](/docs/internals/security.html).
Currently, some of these features are not supported in the Helm chart and
require additional manual configuration.
## Using the Helm Chart
@ -475,7 +476,7 @@ ui:
connectInject:
enabled: true
default: false
default: false
namespaceSelector: "my-app"
```