K8s secrets for protecting database credentials
Some deployments, such as keyrock
and keyrock-mysql
include sensitive data in the form of environment variables.
This is not terribly critical as such credentials are the defaults for Keyrock and are already documented in the official docs. Additionally communication with the databases is restricted to the vfos
namespace and the databases aren't likely to be used to store private information.
Replace ENVAR containing sensitive credentials with k8s secrets and include a sample file in the repository.