From fbc53ac44dbc0f386062d0c187e9a7ebc11a73c8 Mon Sep 17 00:00:00 2001 From: buildmaster Date: Fri, 25 Jan 2019 13:27:48 +0000 Subject: [PATCH] Bumping versions --- README.adoc | 14 ++++++++------ pom.xml | 8 ++++---- spring-cloud-kubernetes-dependencies/pom.xml | 2 +- 3 files changed, 13 insertions(+), 11 deletions(-) diff --git a/README.adoc b/README.adoc index 83fffa03..32f363dd 100644 --- a/README.adoc +++ b/README.adoc @@ -270,13 +270,15 @@ sensitive data such as password, OAuth tokens, etc. This project provides integr accessible by Spring Boot applications. This feature can be explicitly enabled/disabled using the `spring.cloud.kubernetes.secrets.enabled` property. The `SecretsPropertySource` when enabled will lookup Kubernetes for `Secrets` from the following sources: -1. reading recursively from secrets mounts -2. named after the application (as defined by `spring.application.name`) -3. matching some labels + +. reading recursively from secrets mounts +. named after the application (as defined by `spring.application.name`) +. matching some labels Please note that by default, consuming Secrets via API (points 2 and 3 above) **is not enabled** for security reasons - and it is recommend that containers share secrets via mounted volumes. Otherwise proper RBAC security configurations must be provided - to make sure that unauthorized access to Secrets occurs. +and it is recommended that containers share secrets via mounted volumes. +If you enable consuming Secrets via API, then it is recommended access to Secrets is limited by an +[authorization policy such as RBAC](https://kubernetes.io/docs/concepts/configuration/secret/#best-practices). If the secrets are found their data is made available to the application. @@ -755,4 +757,4 @@ added after the original pull request but before a merge. other target branch in the main project). * When writing a commit message please follow http://tbaggery.com/2008/04/19/a-note-about-git-commit-messages.html[these conventions], if you are fixing an existing issue please add `Fixes gh-XXXX` at the end of the commit - message (where XXXX is the issue number). + message (where XXXX is the issue number). \ No newline at end of file diff --git a/pom.xml b/pom.xml index 1b9cca74..96777c51 100644 --- a/pom.xml +++ b/pom.xml @@ -24,7 +24,7 @@ org.springframework.cloud spring-cloud-build - 2.1.2.BUILD-SNAPSHOT + 2.1.3.BUILD-SNAPSHOT @@ -60,9 +60,9 @@ - 2.1.0.BUILD-SNAPSHOT - 2.1.0.BUILD-SNAPSHOT - 2.1.0.BUILD-SNAPSHOT + 2.1.1.BUILD-SNAPSHOT + 2.1.1.BUILD-SNAPSHOT + 2.1.1.BUILD-SNAPSHOT 3.5 diff --git a/spring-cloud-kubernetes-dependencies/pom.xml b/spring-cloud-kubernetes-dependencies/pom.xml index 66a1af65..8c859ebb 100644 --- a/spring-cloud-kubernetes-dependencies/pom.xml +++ b/spring-cloud-kubernetes-dependencies/pom.xml @@ -22,7 +22,7 @@ spring-cloud-dependencies-parent org.springframework.cloud - 2.1.2.BUILD-SNAPSHOT + 2.1.3.BUILD-SNAPSHOT spring-cloud-kubernetes-dependencies