Skip to content
This repository has been archived by the owner on Jun 24, 2022. It is now read-only.

[SonarQube] Document the usage of sonarSecretKey #289

Open
fl-max opened this issue May 28, 2021 · 0 comments
Open

[SonarQube] Document the usage of sonarSecretKey #289

fl-max opened this issue May 28, 2021 · 0 comments

Comments

@fl-max
Copy link

fl-max commented May 28, 2021

The SonarQube Helm Chart provides a way of passing sonarSecretKey, containing a file sonar-secret.txt with your AES-256 encryption key that can be used to Encrypt/Decrypt sonar properties. However, it is not clear how this is intended to be used with the Helm Chart.

According to the docs, the Key needs to be generated in the SonarQube UI. Also, you'd need to use the UI to first encode your property values before they could be used. So if my understanding is correct, this creates a chicken or the egg problem.

Is the idea that your first stand up SonarQube, generate Key, then in subsequent deployments pass this Key to sonarSecretKey? Is it possible to generate this Key outside of the SonarQube UI? Possibly with openssl (ie. openssl enc -aes-256-gcm -k secret -P -md sha1)?

IMO, a short blurb in the README should be added to cover this.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant