From 95dfbfb4d50066f727f77c9e322b8477428bc0b7 Mon Sep 17 00:00:00 2001 From: Adam Saleh Date: Thu, 3 Sep 2020 10:04:52 +0200 Subject: [PATCH] Changed the cookie secret to be randomly generated. --- .../monitor-dashboard/templates/deploymentconfig.yml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/roles/openshift-apps/monitor-dashboard/templates/deploymentconfig.yml b/roles/openshift-apps/monitor-dashboard/templates/deploymentconfig.yml index 08bb6a93d0..bc3736b737 100644 --- a/roles/openshift-apps/monitor-dashboard/templates/deploymentconfig.yml +++ b/roles/openshift-apps/monitor-dashboard/templates/deploymentconfig.yml @@ -20,7 +20,7 @@ spec: - "-openshift-service-account=grafana" - "-upstream=http://localhost:3000" - "-client-secret-file=/var/run/secrets/kubernetes.io/serviceaccount/token" - - "-cookie-secret=SECRET" + - "-cookie-secret={{ 99999999 | random }}" - "-tls-cert=/etc/tls/private/tls.crt" - "-tls-key=/etc/tls/private/tls.key" - "-pass-basic-auth=false"