Uploaded image for project: 'DC/OS'
  1. DC/OS
  2. DCOS_OSS-2507

Metronome's play.crypto.secret is static

    Details

    • Type: Task
    • Status: Accepted
    • Priority: Medium
    • Resolution: Unresolved
    • Affects Version/s: None
    • Fix Version/s: None
    • Component/s: metronome
    • Labels:

      Description

      Currently, the secret is the same across all Metronome installations. It is a security issue. The secret should be unique per installation.

      https://github.com/dcos/metronome/blob/4336d5b15cdd19be4088cd0d68268c5f9b96fc4d/src/main/resources/application.conf#L70

        Attachments

          Activity

            People

            • Assignee:
              ken Ken Sipe
              Reporter:
              ivanchernetsky Ivan Chernetsky
              Team:
              Orchestration Team
              Watchers:
              Ken Sipe
            • Watchers:
              1 Start watching this issue

              Dates

              • Created:
                Updated: