[docs] security warning about Helm chart (#5561)

* [docs] security warning about Helm chart

Correct security warning about helm chart to caution about default Consul install.

* clarify that k8s or consul should be secure
This commit is contained in:
Judith Malnick 2019-04-04 16:58:57 -07:00 committed by GitHub
parent 8068372ceb
commit f27905dc62
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
1 changed files with 9 additions and 8 deletions

View File

@ -22,13 +22,14 @@ properly installed and configured with your Kubernetes cluster.
may still change significantly over time. Please always run Helm with may still change significantly over time. Please always run Helm with
`--dry-run` before any install or upgrade to verify changes. `--dry-run` before any install or upgrade to verify changes.
~> **Security Warning:** By default, the chart will install an insecure configuration ~> **Security Warning:** By default, the chart will install an insecure
of Consul. This provides a less complicated out-of-box experience for new users, configuration of Consul. This provides a less complicated out-of-box experience
but is not appropriate for a production setup. It is highly recommended to use for new users, but is not appropriate for a production setup. Make sure that
a properly secured Kubernetes cluster or make sure that you understand and enable your Kubernetes cluster is properly secured to prevent unwanted access to
the [recommended security features](/docs/internals/security.html). Currently, Consul, or that you understand and enable the
some of these features are not supported in the Helm chart and require additional [recommended Consul security features](/docs/internals/security.html).
manual configuration. Currently, some of these features are not supported in the Helm chart and
require additional manual configuration.
## Using the Helm Chart ## Using the Helm Chart
@ -475,7 +476,7 @@ ui:
connectInject: connectInject:
enabled: true enabled: true
default: false default: false
namespaceSelector: "my-app" namespaceSelector: "my-app"
``` ```